critical9.8
CVE-2021-33046
Some Dahua products have access control vulnerability in the password reset process.
Impact
Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dahuasecurity | Ipc-Hx1xxx Firmware | from 2017-7 through 2021-7 |
| Dahuasecurity | Ipc-Hx2xxx Firmware | from 2017-7 through 2021-7 |
| Dahuasecurity | Ipc-Hx3xxx Firmware | from 2017-7 through 2021-7 |
| Dahuasecurity | Ipc-Hx5\(4\)\(3\)Xxx Firmware | from 2017-7 through 2021-7 |
| Dahuasecurity | Ipc-Hx5xxx Firmware | from 2017-7 through 2021-7 |
| Dahuasecurity | Sd1a1 Firmware | from 2017-7 through 2021-7 |
| Dahuasecurity | Sd22 Firmware | from 2017-7 through 2021-7 |
| Dahuasecurity | Sd49 Firmware | from 2017-7 through 2021-7 |
| Dahuasecurity | Sd50 Firmware | from 2017-7 through 2021-7 |
| Dahuasecurity | Sd52c Firmware | from 2017-7 through 2021-7 |
| Dahuasecurity | Sd6al Firmware | from 2017-7 through 2021-7 |
| Dahuasecurity | Tpc-Bf1241 Firmware | from 2017-7 through 2021-7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.dahuatech.com/networkSecurity/securityDetails?id=95
- https://www.dahuasecurity.com/support/cybersecurity/details/957
- https://www.dahuasecurity.com/support/cybersecurity/details/987
- https://support.dahuatech.com/networkSecurity/securityDetails?id=95
- https://www.dahuasecurity.com/support/cybersecurity/details/957
- https://www.dahuasecurity.com/support/cybersecurity/details/987