CVE-2021-33046
Some Dahua products have access control vulnerability in the password reset process. Attackers...
Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.
- Record
CVE-2021-33046- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.
- Record
CVE-2021-33046- Updated
- 2026-11-02
EUVDEUVD-2021-19761 No score
Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.
- Record
EUVD-2021-19761- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6v9x-wm34-846q No score
Some Dahua products have access control vulnerability in the password reset process. Attackers...
Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.
- Record
GHSA-6v9x-wm34-846q- Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
- dahuasecurity asc2204c firmware
- dahuasecurity hcvr7xxx firmware
- dahuasecurity hcvr8xxx firmware
- dahuasecurity ipc-hx1xxx firmware
- dahuasecurity ipc-hx2xxx firmware
- dahuasecurity ipc-hx3xxx firmware
- dahuasecurity ipc-hx5\(4\)\(3\)xxx firmware
- dahuasecurity ipc-hx5xxx firmware
- dahuasecurity nvr1xxx firmware
- dahuasecurity nvr2xxx firmware
- dahuasecurity nvr4xxx firmware
- dahuasecurity nvr5xxx firmware
Show 16 moreShow less
- dahuasecurity sd1a1 firmware
- dahuasecurity sd22 firmware
- dahuasecurity sd49 firmware
- dahuasecurity sd50 firmware
- dahuasecurity sd52c firmware
- dahuasecurity sd6al firmware
- dahuasecurity tpc-bf1241 firmware
- dahuasecurity tpc-bf2221 firmware
- dahuasecurity tpc-bf5x01 firmware
- dahuasecurity tpc-pt8x21x firmware
- dahuasecurity tpc-sd2221 firmware
- dahuasecurity tpc-sd8x21 firmware
- dahuasecurity vtox20xf firmware
- dahuasecurity xvr4xxx firmware
- dahuasecurity xvr5xxx firmware
- dahuasecurity xvr7xxx firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-33046 is a critical vulnerability (CVSS 9.8) in Dahuasecurity Asc2204c Firmware, published January 13, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.34%, the 71st percentile. No source names a fixed version.