NetSight
high8.1

CVE-2019-9682

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devi…

Impact

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.

Affected products

VendorProductAffected versions
DahuasecuritySd6al Firmware
before 2019-12
DahuasecuritySd5a Firmware
before 2019-12
DahuasecuritySd1a Firmware
before 2019-12
DahuasecurityPtz1a Firmware
before 2019-12
DahuasecuritySd50 Firmware
before 2019-12
DahuasecuritySd52c Firmware
before 2019-12
DahuasecurityIpc-Hx5842h Firmware
before 2019-12
DahuasecurityIpc-Hx7842h Firmware
before 2019-12
DahuasecurityIpc-Hx2xxx Firmware
before 2019-12
DahuasecurityIpc-Hxxx5x4x Firmware
before 2019-12
DahuasecurityN42b1p Firmware
before 2019-12
DahuasecurityN42b2p Firmware
before 2019-12

Weakness classification

References