CRITICAL🇵🇱 Wersja polska

CVE-2021-33046

CVSS 9.8v3.1pub. 2022-01-13upd. 2024-11-21

Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Dahuasecurity Asc2204c

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Asc2204c Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7

  • Dahuasecurity Hcvr7xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Hcvr7xxx Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7

  • Dahuasecurity Hcvr8xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Hcvr8xxx Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7

  • Dahuasecurity Ipc Hx1xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hx1xxx Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7

  • Dahuasecurity Ipc Hx2xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hx2xxx Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7

  • Dahuasecurity Ipc Hx3xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hx3xxx Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7

  • Dahuasecurity Ipc Hx5\(4\)\(3\)xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hx5\(4\)\(3\)xxx Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7

  • Dahuasecurity Ipc Hx5xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ipc Hx5xxx Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7

  • Dahuasecurity Nvr1xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Nvr1xxx Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7

  • Dahuasecurity Nvr2xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Nvr2xxx Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7

  • Dahuasecurity Nvr4xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Nvr4xxx Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7

  • Dahuasecurity Nvr5xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Nvr5xxx Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7

  • Dahuasecurity Sd1a1

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Sd1a1 Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7

  • Dahuasecurity Sd22

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Sd22 Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7

  • Dahuasecurity Sd49

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Sd49 Firmware

    OS
    Dahuasecurity
    2017-7 – 2021-7
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2021-33044CRITICAL9.8⚠ KEVPL ✓same product

Pominięcie uwierzytelnienia w urządzeniach Dahua podczas logowania

CVE-2021-33045CRITICAL9.8⚠ KEVPL ✓same product

Pominięcie uwierzytelnienia w urządzeniach Dahua podczas logowania

CVE-2020-9502CRITICAL9.8PL ✓same product

Przewidywalne Session ID w urządzeniach Dahua — podatność CRITICAL

CVE-2019-9682HIGH8.1same product

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to ...

CVE-2020-9499HIGH7.2same product

Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the...