HIGH🇬🇧 English

CVE-2020-9499

CVSS 7.2v3.1pub. 2020-04-09upd. 2024-11-21

Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Dahua N54a4p

    HW
    Dahua
    wszystkie wersje

  • Dahuasecurity Ipc Hx2xxx

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ipc Hx2xxx Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Ipc Hx5842h

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ipc Hx5842h Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Ipc Hx7842h

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ipc Hx7842h Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Ipc Hxxx5x4x

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ipc Hxxx5x4x Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N42b1p

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity N42b1p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N42b2p

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity N42b2p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N42b3p

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity N42b3p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N52a4p

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity N52a4p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N52b2p

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity N52b2p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N52b3p

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity N52b3p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N52b5p

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity N52b5p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N54a4p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N54b2p

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity N54b2p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Ptz1a

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ptz1a Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Sd1a

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Sd1a Firmware

    OS
    Dahuasecurity
    < 2019-12
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Memory
CWE
Referencje

Powiązane podatności

CVE-2021-33044CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Pominięcie uwierzytelnienia w urządzeniach Dahua podczas logowania

CVE-2021-33046CRITICAL9.8PL ✓ten sam produkt

Obejście uwierzytelniania w procesie resetowania hasła w urządzeniach Dahua

CVE-2020-9502CRITICAL9.8PL ✓ten sam produkt

Przewidywalne Session ID w urządzeniach Dahua — podatność CRITICAL

CVE-2019-9682HIGH8.1ten sam produkt

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to ...

CVE-2020-9500MEDIUM4.9ten sam produkt

Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account...