CVE-2024-39948
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data...
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.
- Record
CVE-2024-39948- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476, CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2024-38316
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.
- Record
EUVD-2024-38316- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-94cv-f96h-hxfx
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data...
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.
- Record
GHSA-94cv-f96h-hxfx- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20, CWE-476
- Updated
- 2026-11-02
NVD
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.
- Record
CVE-2024-39948- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476, CWE-20
- Updated
- 2026-11-02
Affected products
- dahua nvr4xxx
- dahuasecurity nvr4104-4ks2\/l firmware
- dahuasecurity nvr4104-4ks3 firmware
- dahuasecurity nvr4104-p-4ks2\/l firmware
- dahuasecurity nvr4104-p-4ks3\(960g\) firmware
- dahuasecurity nvr4104-p-4ks3 firmware
- dahuasecurity nvr4104hs-4ks2\/l firmware
- dahuasecurity nvr4104hs-4ks3\(960g\) firmware
- dahuasecurity nvr4104hs-4ks3 firmware
- dahuasecurity nvr4104hs-p-4ks2\/l firmware
- dahuasecurity nvr4104hs-p-4ks3\(960g\) firmware
- dahuasecurity nvr4104hs-p-4ks3 firmware
Show 46 moreShow less
- dahuasecurity nvr4108-4ks2\/l firmware
- dahuasecurity nvr4108-4ks3 firmware
- dahuasecurity nvr4108-8p-4ks2\/l firmware
- dahuasecurity nvr4108-8p-4ks3 firmware
- dahuasecurity nvr4108-p-4ks2\/l firmware
- dahuasecurity nvr4108-p-4ks3 firmware
- dahuasecurity nvr4108hs-4ks2\/l firmware
- dahuasecurity nvr4108hs-4ks3\(960g\) firmware
- dahuasecurity nvr4108hs-4ks3 firmware
- dahuasecurity nvr4108hs-8p-4ks2\/l firmware
- dahuasecurity nvr4108hs-8p-4ks3 firmware
- dahuasecurity nvr4108hs-p-4ks2\/l firmware
- dahuasecurity nvr4108hs-p-4ks3 firmware
- dahuasecurity nvr4116-4ks2\/l firmware
- dahuasecurity nvr4116-4ks3 firmware
- dahuasecurity nvr4116-8p-4ks2\/l firmware
- dahuasecurity nvr4116-8p-4ks3 firmware
- dahuasecurity nvr4116hs-4ks2\/l firmware
- dahuasecurity nvr4116hs-4ks3 firmware
- dahuasecurity nvr4116hs-8p-4ks2\/l firmware
- dahuasecurity nvr4116hs-8p-4ks3 firmware
- dahuasecurity nvr4204-4ks2\/l firmware
- dahuasecurity nvr4204-4ks3 firmware
- dahuasecurity nvr4204-p-4ks2\/l firmware
- dahuasecurity nvr4204-p-4ks3 firmware
- dahuasecurity nvr4208-4ks2\/l firmware
- dahuasecurity nvr4208-4ks3 firmware
- dahuasecurity nvr4208-8p-4ks2\/l firmware
- dahuasecurity nvr4208-8p-4ks3 firmware
- dahuasecurity nvr4216-16p-4ks2\/l firmware
- dahuasecurity nvr4216-16p-4ks3 firmware
- dahuasecurity nvr4216-4ks2\/l firmware
- dahuasecurity nvr4216-4ks3 firmware
- dahuasecurity nvr4232-16p-4ks2\/l firmware
- dahuasecurity nvr4232-16p-4ks3 firmware
- dahuasecurity nvr4232-4ks2\/l firmware
- dahuasecurity nvr4232-4ks3 firmware
- dahuasecurity nvr4416-16p-4ks2\/i firmware
- dahuasecurity nvr4416-4ks2\/i firmware
- dahuasecurity nvr4432-16p-4ks2\/i firmware
- dahuasecurity nvr4432-4ks2\/i firmware
- dahuasecurity nvr4816-16p-4ks2\/i firmware
- dahuasecurity nvr4816-4ks2\/i firmware
- dahuasecurity nvr4832-16p-4ks2\/i firmware
- dahuasecurity nvr4832-4ks2\/i firmware
- dahuasecurity nvr4832-i
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-39948 is a high vulnerability (CVSS 7.5) in Dahua Nvr4xxx, published July 31, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. No source names a fixed version.