medium4.9
CVE-2024-39945
A vulnerability has been found in Dahua products.
Impact
A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device to crash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dahuasecurity | Nvr4104-4ks2\/L Firmware | before 4.003.0000000.1.r.240515 |
| Dahuasecurity | Nvr4108-4ks2\/L Firmware | Version 4.003.0000000.1.r.240515 |
| Dahuasecurity | Nvr4116-4ks2\/L Firmware | before 4.003.0000000.1.r.240515 |
| Dahuasecurity | Nvr4104-P-4ks2\/L Firmware | before 4.003.0000000.1.r.240515 |
| Dahuasecurity | Nvr4108-P-4ks2\/L Firmware | before 4.003.0000000.1.r.240515 |
| Dahuasecurity | Nvr4108-8p-4ks2\/L Firmware | before 4.003.0000000.1.r.240515 |
| Dahuasecurity | Nvr4116-8p-4ks2\/L Firmware | before 4.003.0000000.1.r.240515 |
| Dahuasecurity | Nvr4104hs-4ks2\/L Firmware | before 4.003.0000000.1.r.240515 |
| Dahuasecurity | Nvr4108hs-4ks2\/L Firmware | before 4.003.0000000.1.r.240515 |
| Dahuasecurity | Nvr4104hs-P-4ks2\/L Firmware | before 4.003.0000000.1.r.240515 |
| Dahuasecurity | Nvr4108hs-P-4ks2\/L Firmware | before 4.003.0000000.1.r.240515 |
| Dahuasecurity | Nvr4108hs-8p-4ks2\/L Firmware | before 4.003.0000000.1.r.240515 |