high7.2
CVE-2020-9499
Some Dahua products have buffer overflow vulnerabilities.
Impact
Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dahuasecurity | Sd6al Firmware | before 2019-12 |
| Dahuasecurity | Sd5a Firmware | before 2019-12 |
| Dahuasecurity | Sd1a Firmware | before 2019-12 |
| Dahuasecurity | Ptz1a Firmware | before 2019-12 |
| Dahuasecurity | Sd50 Firmware | before 2019-12 |
| Dahuasecurity | Sd52c Firmware | before 2019-12 |
| Dahuasecurity | Ipc-Hx5842h Firmware | before 2019-12 |
| Dahuasecurity | Ipc-Hx7842h Firmware | before 2019-12 |
| Dahuasecurity | Ipc-Hx2xxx Firmware | before 2019-12 |
| Dahuasecurity | Ipc-Hxxx5x4x Firmware | before 2019-12 |
| Dahuasecurity | N42b1p Firmware | before 2019-12 |
| Dahuasecurity | N42b2p Firmware | before 2019-12 |