DA
Vendor
Dahuasecurity
1,275
CVEs
37
On KEV
0
New 30D
Products
IF9.8
Ipc-hx3xxx Firmware
Dahuasecurity
3 CVEs2 on KEV0 new
IF9.8
Ipc-hx5xxx Firmware
Dahuasecurity
3 CVEs2 on KEV0 new
IF9.8
Ipc-hum7xxx Firmware
Dahuasecurity
2 CVEs2 on KEV0 new
VF9.8
Vth-542xh Firmware
Dahuasecurity
2 CVEs2 on KEV0 new
VF9.8
Vto-65xxx Firmware
Dahuasecurity
2 CVEs2 on KEV0 new
VF9.8
Vto-75x95x Firmware
Dahuasecurity
2 CVEs2 on KEV0 new
SF9.8
Sd50 Firmware
Dahuasecurity
6 CVEs1 on KEV0 new
SF9.8
Sd52c Firmware
Dahuasecurity
6 CVEs1 on KEV0 new
SF9.8
Sd6al Firmware
Dahuasecurity
6 CVEs1 on KEV0 new
SF9.8
Sd1a1 Firmware
Dahuasecurity
2 CVEs1 on KEV0 new
SF9.8
Sd22 Firmware
Dahuasecurity
2 CVEs1 on KEV0 new
SF9.8
Sd49 Firmware
Dahuasecurity
2 CVEs1 on KEV0 new
TF9.8
Tpc-bf1241 Firmware
Dahuasecurity
2 CVEs1 on KEV0 new
TF9.8
Tpc-bf2221 Firmware
Dahuasecurity
2 CVEs1 on KEV0 new
TF9.8
Tpc-bf5x01 Firmware
Dahuasecurity
2 CVEs1 on KEV0 new
TF9.8
Tpc-sd2221 Firmware
Dahuasecurity
2 CVEs1 on KEV0 new
TF9.8
Tpc-sd8x21 Firmware
Dahuasecurity
2 CVEs1 on KEV0 new
NF9.8
Nvr-1xxx Firmware
Dahuasecurity
1 CVEs1 on KEV0 new
NF9.8
Nvr-2xxx Firmware
Dahuasecurity
1 CVEs1 on KEV0 new
NF9.8
Nvr-4xxx Firmware
Dahuasecurity
1 CVEs1 on KEV0 new
NF9.8
Nvr-5xxx Firmware
Dahuasecurity
1 CVEs1 on KEV0 new
NF9.8
Nvr-6xx Firmware
Dahuasecurity
1 CVEs1 on KEV0 new
TF9.8
Tpc-bf5x21 Firmware
Dahuasecurity
1 CVEs1 on KEV0 new
TF9.8
Tpc-pt8x21b Firmware
Dahuasecurity
1 CVEs1 on KEV0 new
XF9.8
Xvr-4x04 Firmware
Dahuasecurity
1 CVEs1 on KEV0 new
XF9.8
Xvr-4x08 Firmware
Dahuasecurity
1 CVEs1 on KEV0 new
XF9.8
Xvr-5x04 Firmware
Dahuasecurity
1 CVEs1 on KEV0 new
XF9.8
Xvr-5x08 Firmware
Dahuasecurity
1 CVEs1 on KEV0 new
XF9.8
Xvr-5x16 Firmware
Dahuasecurity
1 CVEs1 on KEV0 new
XF9.8
Xvr-7x16 Firmware
Dahuasecurity
1 CVEs1 on KEV0 new
XF9.8
Xvr-7x32 Firmware
Dahuasecurity
1 CVEs1 on KEV0 new
DF7.5
Dhi-dss4004-s2 Firmware
Dahuasecurity
12 CVEs0 on KEV0 new
DF7.5
Dhi-dss7016d-s2 Firmware
Dahuasecurity
12 CVEs0 on KEV0 new
DF7.5
Dhi-dss7016dr-s2 Firmware
Dahuasecurity
12 CVEs0 on KEV0 new
DE7.5
Dss Express
Dahuasecurity
12 CVEs0 on KEV0 new
DP7.5
Dss Professional
Dahuasecurity
12 CVEs0 on KEV0 new
NF9.8
Nvr4416-16p-4ks2/i Firmware
Dahuasecurity
8 CVEs0 on KEV0 new
NF9.8
Nvr4416-4ks2/i Firmware
Dahuasecurity
8 CVEs0 on KEV0 new
NF9.8
Nvr4432-16p-4ks2/i Firmware
Dahuasecurity
8 CVEs0 on KEV0 new
NF9.8
Nvr4432-4ks2/i Firmware
Dahuasecurity
8 CVEs0 on KEV0 new
NF9.8
Nvr4816-16p-4ks2/i Firmware
Dahuasecurity
8 CVEs0 on KEV0 new
NF9.8
Nvr4816-4ks2/i Firmware
Dahuasecurity
8 CVEs0 on KEV0 new
NF9.8
Nvr4832-16p-4ks2/i Firmware
Dahuasecurity
8 CVEs0 on KEV0 new
NF9.8
Nvr4832-4ks2/i Firmware
Dahuasecurity
8 CVEs0 on KEV0 new
NF9.8
Nvr4104-4ks2/l Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4104-4ks3 Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4104-p-4ks2/l Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4104-p-4ks3(960g) Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4104-p-4ks3 Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4104hs-4ks2/l Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4104hs-4ks3(960g) Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4104hs-4ks3 Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4104hs-p-4ks2/l Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4104hs-p-4ks3(960g) Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4104hs-p-4ks3 Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4108-4ks2/l Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4108-4ks3 Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4108-8p-4ks2/l Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4108-8p-4ks3 Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
NF9.8
Nvr4108-p-4ks2/l Firmware
Dahuasecurity
7 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-39950 | NF Nvr4104-4ks2/l Firmware Dahuasecurity | 9.8 | Jul 31 | A vulnerability has been found in Dahua products |
| CVE-2024-39949 | NF Nvr4104-4ks2/l Firmware Dahuasecurity | 7.5 | Jul 31 | A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash |
| CVE-2024-39948 | NF Nvr4104-4ks2/l Firmware Dahuasecurity | 7.5 | Jul 31 | A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash |
| CVE-2024-39947 | NF Nvr4104-4ks2/l Firmware Dahuasecurity | 6.5 | Jul 31 | A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packet to the interface… |
| CVE-2024-39946 | NF Nvr4104-4ks2/l Firmware Dahuasecurity | 7.2 | Jul 31 | A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface… |
| CVE-2024-39945 | NF Nvr4232-4ks2/l Firmware Dahuasecurity | 4.9 | Jul 31 | A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the… |
| CVE-2024-39944 | IF Ipc-hfs8849g-z3-led Firmware Dahuasecurity | 7.5 | Jul 31 | A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash |
| CVE-2023-3836 | SP Smart Parking Management Dahuasecurity | 9.8 | Jul 22 | A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713 |
| CVE-2023-3121 | SP Smart Parking Management Dahuasecurity | 4.6 | Jun 6 | A vulnerability has been found in Dahua Smart Parking Management up to 20230528 and classified as problematic |
| CVE-2022-30564 | IF Ipc-hf5442f-ze Firmware Dahuasecurity | 5.3 | Feb 9 | Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp |
| CVE-2022-45434 | DF Dhi-dss4004-s2 Firmware Dahuasecurity | 5.9 | Dec 27 | Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server |
| CVE-2022-45433 | DF Dhi-dss4004-s2 Firmware Dahuasecurity | 3.7 | Dec 27 | Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server |
| CVE-2022-45432 | DF Dhi-dss4004-s2 Firmware Dahuasecurity | 5.3 | Dec 27 | Some Dahua software products have a vulnerability of unauthenticated search for devices |
| CVE-2022-45431 | DF Dhi-dss4004-s2 Firmware Dahuasecurity | 7.5 | Dec 27 | Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server |
| CVE-2022-45430 | DF Dhi-dss7016d-s2 Firmware Dahuasecurity | 3.7 | Dec 27 | Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD service |
| CVE-2022-45429 | DF Dhi-dss7016dr-s2 Firmware Dahuasecurity | 7.5 | Dec 27 | Some Dahua software products have a vulnerability of server-side request forgery (SSRF) |
| CVE-2022-45428 | DF Dhi-dss7016dr-s2 Firmware Dahuasecurity | 2.7 | Dec 27 | Some Dahua software products have a vulnerability of sensitive information leakage |
| CVE-2022-45427 | DF Dhi-dss7016dr-s2 Firmware Dahuasecurity | 7.2 | Dec 27 | Some Dahua software products have a vulnerability of unrestricted upload of file |
| CVE-2022-45426 | DE Dss Express Dahuasecurity | 6.5 | Dec 27 | Some Dahua software products have a vulnerability of unrestricted download of file |
| CVE-2022-45425 | DE Dss Express Dahuasecurity | 7.5 | Dec 27 | Some Dahua software products have a vulnerability of using of hard-coded cryptographic key |
| CVE-2022-45424 | DE Dss Express Dahuasecurity | 5.3 | Dec 27 | Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key |
| CVE-2022-45423 | DP Dss Professional Dahuasecurity | 7.5 | Dec 27 | Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials |
| CVE-2022-30563 | IF Ipc-hfw2231t-as-s2 Firmware Dahuasecurity | 7.4 | Jun 28 | When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login… |
| CVE-2022-30562 | IF Ipc-hdbw2231r-zas-s2 Firmware Dahuasecurity | 4.7 | Jun 28 | If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the… |
| CVE-2022-30561 | AF Asi7213x Firmware Dahuasecurity | 5.9 | Jun 28 | When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet |
| CVE-2022-30560 | AF Asi7213x Firmware Dahuasecurity | 7.4 | Jun 28 | When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specified crafted packet to the vulnerable… |
| CVE-2021-33046 | NF Nvr4xxx Firmware Dahuasecurity | 9.8 | Jan 13 | Some Dahua products have access control vulnerability in the password reset process |
| CVE-2021-33045 In wildKEV | IF Ipc-hx5xxx Firmware Dahuasecurity | 9.8 | Sep 15 | Dahua IP Camera Authentication Bypass Vulnerability |
| CVE-2021-33044 In wildKEV | SF Sd1a1 Firmware Dahuasecurity | 9.8 | Sep 15 | Dahua IP Camera Authentication Bypass Vulnerability |
| CVE-2020-9502 | NF N42b1p Firmware Dahuasecurity | 9.8 | May 13 | Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities |
| CVE-2020-9501 | WP Web P2p Dahuasecurity | 5.5 | May 13 | Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways |
| CVE-2019-9682 | NF N42b3p Firmware Dahuasecurity | 8.1 | May 13 | Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices… |
| CVE-2020-9500 | NF N54b2p Firmware Dahuasecurity | 4.9 | Apr 9 | Some products of Dahua have Denial of Service vulnerabilities |
| CVE-2020-9499 | SF Sd6al Firmware Dahuasecurity | 7.2 | Apr 9 | Some Dahua products have buffer overflow vulnerabilities |
| CVE-2019-9680 | IF Ipc-hdw5x2x Firmware Dahuasecurity | 5.3 | Sep 18 | Some Dahua products have information leakage issues |
| CVE-2019-9679 | IF Ipc-hfw5x2x Firmware Dahuasecurity | 8.8 | Sep 18 | Some of Dahua's Debug functions do not have permission separation |
| CVE-2019-9678 | IF Ipc-hdw5x2x Firmware Dahuasecurity | 7.5 | Sep 18 | Some Dahua products have the problem of denial of service during the login process |
| CVE-2019-9677 | IF Ipc-hdw2x2x Firmware Dahuasecurity | 9.8 | Sep 18 | The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets |
| CVE-2019-9681 | IF Ipc-hfw4x2x Firmware Dahuasecurity | 5.3 | Sep 17 | Online upgrade information in some firmware packages of Dahua products is not encrypted |
| CVE-2019-9676 | IF Ipc-hfw2xxx Firmware Dahuasecurity | 7.8 | Jun 12 | Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11 |
| CVE-2017-3223 | IC IP Camera Firmware Dahuasecurity | 9.8 | Jul 24 | Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow |
| CVE-2017-9317 | XF Xvr5x08 Firmware Dahuasecurity | 8.8 | May 23 | Privilege escalation vulnerability found in some Dahua IP devices |
| CVE-2017-9315 | IF Ipc-hdbw2xxx Firmware Dahuasecurity | 9.8 | Nov 28 | Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin… |
| CVE-2017-9316 | IF Ipc-hf5x00 Firmware Dahuasecurity | 6.5 | Nov 27 | Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products |
| CVE-2017-9314 | NF Nvr5432-16p-4ks2 Firmware Dahuasecurity | 8.8 | Nov 13 | Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102 |
| CVE-2017-7927 | DF Dh-hcvr4xxx Firmware Dahuasecurity | 7.3 | May 6 | A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX,… |
| CVE-2017-7925 | DF Dhi-hcvr51a04he-s3 Firmware Dahuasecurity | 9.8 | May 6 | A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX,… |
| CVE-2017-7253 | IC IP Camera Firmware Dahuasecurity | 8.8 | Mar 30 | Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1 |
| CVE-2017-6432 | NF Nvr Firmware Dahuasecurity | 8.1 | Mar 9 | An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices |
| CVE-2017-6343 | SF Smartpss Firmware Dahuasecurity | 8.1 | Feb 27 | The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19… |
| CVE-2017-6342 | CF Camera Firmware Dahuasecurity | 9.8 | Feb 27 | An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1… |
| CVE-2017-6341 | NF Nvr Firmware Dahuasecurity | 5.9 | Feb 27 | Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 send cleartext… |
| CVE-2013-6117 | DF Dvr Firmware Dahuasecurity | – | Jul 11 | Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear… |
| CVE-2013-5754 | DV Dvr5404 Dahuasecurity | – | Sep 17 | The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote… |
| CVE-2013-3615 | DV Dvr2404lf-s Dahuasecurity | – | Sep 17 | Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a… |
| CVE-2013-3614 | DV Dvr2404lf-s Dahuasecurity | – | Sep 17 | Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a brute-force attack |
| CVE-2013-3613 | DV Dvr2404lf-s Dahuasecurity | – | Sep 17 | Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET… |
| CVE-2013-3612 | DV Dvr3204hf-s Dahuasecurity | – | Sep 17 | Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain… |
