CRITICAL🇵🇱 Wersja polska

CVE-2020-9502

CVSS 9.8v3.1pub. 2020-05-13upd. 2024-11-21

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Dahuasecurity Ipc Hdbw1320e W

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hdbw1320e W Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Ipc Hx2xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hx2xxx Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Ipc Hx5842h

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hx5842h Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Ipc Hx7842h

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hx7842h Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Ipc Hxxx5x4x

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hxxx5x4x Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N42b1p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N42b1p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N42b2p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N42b2p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N42b3p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N42b3p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N52a4p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N52a4p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N52b2p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N52b2p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N52b3p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N52b3p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N52b5p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N52b5p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N54a4p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N54a4p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity N54b2p

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity N54b2p Firmware

    OS
    Dahuasecurity
    < 2019-12

  • Dahuasecurity Ptz1a

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ptz1a Firmware

    OS
    Dahuasecurity
    < 2019-12
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-33044CRITICAL9.8⚠ KEVPL ✓same product

Pominięcie uwierzytelnienia w urządzeniach Dahua podczas logowania

CVE-2021-33046CRITICAL9.8PL ✓same product

Obejście uwierzytelniania w procesie resetowania hasła w urządzeniach Dahua

CVE-2019-9682HIGH8.1same product

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to ...

CVE-2020-9499HIGH7.2same product

Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the...

CVE-2020-9500MEDIUM4.9same product

Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account...