Vulnerability index

Browse CVEs

13 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Ipc Hfw1xxx Firmware CRITICAL 9.8
CVE-2017-9315

Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dea…

Mitigation only
Fix from $2,300 2017-11-28
Nvr5464 16p 4ks2 Firmware HIGH 8.8
CVE-2017-9314

Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171…

Mitigation only
Fix from $1,950 2017-11-13
Ip Camera Firmware HIGH 8.8
CVE-2017-7253

Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request t…

No fix yet
Fix from $1,950 2017-03-30
Nvr Firmware HIGH 8.1
CVE-2017-6432

An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which operates on TCP Port 37777, i…

No fix yet
Fix from $1,950 2017-03-09
Camera Firmware CRITICAL 9.8
CVE-2017-6342EPSS 13%

An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and…

Mitigation only
Fix from $2,300 2017-02-27
Camera Firmware HIGH 8.1
CVE-2017-6343EPSS 60%

The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and Smart…

Mitigation only
Fix from $1,950 2017-02-27
Camera Firmware MEDIUM 5.9
CVE-2017-6341EPSS 9%

Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2…

Mitigation only
Fix from $1,600 2017-02-27
Dvr Firmware HIGH 7.5
CVE-2013-6117EPSS 70%

Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials,…

No fix yet
Fix from $1,950 2014-07-11
Dvr0404hd A HIGH 10.0
CVE-2013-5754

The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which…

Mitigation only
Fix from $1,950 2013-09-17
Dvr0404hd A HIGH 10.0
CVE-2013-3612EPSS 10%

Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote a…

Mitigation only
Fix from $1,950 2013-09-17
Dvr0404hd A HIGH 9.3
CVE-2013-3614EPSS 7%

Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a brute-forc…

No fix yet
Fix from $1,950 2013-09-17
Dvr0404hd A HIGH 7.8
CVE-2013-3613EPSS 7%

Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a repl…

Mitigation only
Fix from $1,950 2013-09-17
Dvr0404hd A HIGH 7.8
CVE-2013-3615EPSS 8%

Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleart…

Mitigation only
Fix from $1,950 2013-09-17