HIGH🇵🇱 Wersja polska

CVE-2019-9682

CVSS 8.1v3.1pub. 2020-05-13upd. 2024-11-21

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Dahuasecurity Ipc Hdbw1320e W

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hdbw1320e W Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Ipc Hx2xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hx2xxx Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Ipc Hx5842h

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hx5842h Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Ipc Hx7842h

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hx7842h Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Ipc Hxxx5x4x

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hxxx5x4x Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N42b1p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N42b1p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N42b2p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N42b2p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N42b3p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N42b3p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N52a4p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N52a4p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N52b2p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N52b2p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N52b3p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N52b3p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N52b5p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N52b5p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N54a4p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N54a4p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N54b2p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N54b2p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Ptz1a

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ptz1a Firmware

    OS
    Dahuasecurity
    < 2019-12
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-33044CRITICAL9.8⚠ KEVPL ✓same product

Pominięcie uwierzytelnienia w urządzeniach Dahua podczas logowania

CVE-2021-33046CRITICAL9.8PL ✓same product

Obejście uwierzytelniania w procesie resetowania hasła w urządzeniach Dahua

CVE-2020-9502CRITICAL9.8PL ✓same product

Przewidywalne Session ID w urządzeniach Dahua — podatność CRITICAL

CVE-2020-9499HIGH7.2same product

Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the...

CVE-2020-9500MEDIUM4.9same product

Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account...