high7.5
CVE-2019-9678
Some Dahua products have the problem of denial of service during the login process.
Impact
Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dahuasecurity | Ipc-Hdw1x2x Firmware | before 2019-08-18 |
| Dahuasecurity | Ipc-Hfw1x2x Firmware | before 2019-08-18 |
| Dahuasecurity | Ipc-Hdw2x2x Firmware | before 2019-08-18 |
| Dahuasecurity | Ipc-Hfw2x2x Firmware | before 2019-08-18 |
| Dahuasecurity | Ipc-Hdw4x2x Firmware | before 2019-08-18 |
| Dahuasecurity | Ipc-Hfw4x2x Firmware | before 2019-08-18 |
| Dahuasecurity | Ipc-Hdbw4x2x Firmware | before 2019-08-18 |
| Dahuasecurity | Ipc-Hdw5x2x Firmware | before 2019-08-18 |
| Dahuasecurity | Ipc-Hfw5x2x Firmware | before 2019-08-18 |