NetSight
IP …
medium5.3

CVE-2019-9680

Some Dahua products have information leakage issues.

Impact

Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.

Affected products

VendorProductAffected versions
DahuasecurityIpc-Hdw1x2x Firmware
before 2019-08-18
DahuasecurityIpc-Hfw1x2x Firmware
before 2019-08-18
DahuasecurityIpc-Hdw2x2x Firmware
before 2019-08-18
DahuasecurityIpc-Hfw2x2x Firmware
before 2019-08-18
DahuasecurityIpc-Hdw4x2x Firmware
before 2019-08-18
DahuasecurityIpc-Hfw4x2x Firmware
before 2019-08-18
DahuasecurityIpc-Hdbw4x2x Firmware
before 2019-08-18
DahuasecurityIpc-Hdw5x2x Firmware
before 2019-08-18
DahuasecurityIpc-Hfw5x2x Firmware
before 2019-08-18

References