Browse CVEs

CRITICAL 9.8 CVE-2019-9677 The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malici… Ipc Hdw1x2x Firmware 2019-08-18+ Fix from $2,3002019-09-18 MEDIUM 5.3 CVE-2019-9681 Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware … Ipc Hdw1x2x Firmware 2019-08-18+ Fix from $1,6002019-09-17 HIGH 7.8 CVE-2019-9676 Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11. The vulnerability exits… Ipc Hfw1xxx Firmware 2018-11+ Fix from $1,9502019-06-12 CRITICAL 9.8 CVE-2017-3223EPSS 5% Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerab… Ip Camera Firmware 2.400.0000.14.r.20170713+ Fix from $2,3002018-07-24 HIGH 8.8 CVE-2017-9317 Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential info… Xvr5x16 Firmware 2.621.0000.28.r.20170912 / 2.622.0000000.18.r.20171110+ Fix from $1,9502018-05-23 CRITICAL 9.8 CVE-2017-9315 Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dea… Ipc Hfw1xxx Firmware Mitigation only Fix from $2,3002017-11-28 MEDIUM 6.5 CVE-2017-9316 Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal D… Nvr11hs Firmware Patch available Fix from $1,6002017-11-27 HIGH 8.8 CVE-2017-9314 Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171… Nvr5464 16p 4ks2 Firmware Mitigation only Fix from $1,9502017-11-13 CRITICAL 9.8 CVE-2017-7925EPSS 51% A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XX… Dh Ipc Hdbw23a0rn Zs Firmware Patch available Fix from $2,3002017-05-06 HIGH 7.3 CVE-2017-7927EPSS 37% A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, … Dh Ipc Hdbw23a0rn Zs Firmware Patch available Fix from $1,9502017-05-06 HIGH 8.8 CVE-2017-7253 Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request t… Ip Camera Firmware No fix yet Fix from $1,9502017-03-30 HIGH 8.1 CVE-2017-6432 An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which operates on TCP Port 37777, i… Nvr Firmware No fix yet Fix from $1,9502017-03-09 CRITICAL 9.8 CVE-2017-6342EPSS 13% An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and… Camera Firmware Mitigation only Fix from $2,3002017-02-27 HIGH 8.1 CVE-2017-6343EPSS 60% The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and Smart… Camera Firmware Mitigation only Fix from $1,9502017-02-27 MEDIUM 5.9 CVE-2017-6341EPSS 9% Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2… Camera Firmware Mitigation only Fix from $1,6002017-02-27 HIGH 7.5 CVE-2013-6117EPSS 70% Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials,… Dvr Firmware No fix yet Fix from $1,9502014-07-11 HIGH 10.0 CVE-2013-5754 The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which… Dvr0404hd A Mitigation only Fix from $1,9502013-09-17 HIGH 10.0 CVE-2013-3612EPSS 10% Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote a… Dvr0404hd A Mitigation only Fix from $1,9502013-09-17 HIGH 9.3 CVE-2013-3614EPSS 7% Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a brute-forc… Dvr0404hd A No fix yet Fix from $1,9502013-09-17 HIGH 7.8 CVE-2013-3613EPSS 7% Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a repl… Dvr0404hd A Mitigation only Fix from $1,9502013-09-17 HIGH 7.8 CVE-2013-3615EPSS 8% Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleart… Dvr0404hd A Mitigation only Fix from $1,9502013-09-17