CVE-2024-39950
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data...
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization.
- Record
CVE-2024-39950- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L - Weakness
- CWE-121, CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2024-38318
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization.
- Record
EUVD-2024-38318- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-x56v-vwr6-4gfg
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data...
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization.
- Record
GHSA-x56v-vwr6-4gfg- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L - Weakness
- CWE-20, CWE-121
- Updated
- 2026-11-02
NVD
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization.
- Record
CVE-2024-39950- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121, CWE-20
- Updated
- 2026-11-02
Affected products
- dahua nvr4xxx and ipc-hx8xxx
- dahuasecurity ipc-hf8xxx firmware
- dahuasecurity ipc-hfs8449g-z7-led firmware
- dahuasecurity ipc-hfs8849g-z3-led firmware
- dahuasecurity ipc-hfw8xxx
- dahuasecurity nvr4104-4ks2\/l firmware
- dahuasecurity nvr4104-4ks3 firmware
- dahuasecurity nvr4104-p-4ks2\/l firmware
- dahuasecurity nvr4104-p-4ks3\(960g\) firmware
- dahuasecurity nvr4104-p-4ks3 firmware
- dahuasecurity nvr4104hs-4ks2\/l firmware
- dahuasecurity nvr4104hs-4ks3\(960g\) firmware
Show 50 moreShow less
- dahuasecurity nvr4104hs-4ks3 firmware
- dahuasecurity nvr4104hs-p-4ks2\/l firmware
- dahuasecurity nvr4104hs-p-4ks3\(960g\) firmware
- dahuasecurity nvr4104hs-p-4ks3 firmware
- dahuasecurity nvr4108-4ks2\/l firmware
- dahuasecurity nvr4108-4ks3 firmware
- dahuasecurity nvr4108-8p-4ks2\/l firmware
- dahuasecurity nvr4108-8p-4ks3 firmware
- dahuasecurity nvr4108-p-4ks2\/l firmware
- dahuasecurity nvr4108-p-4ks3 firmware
- dahuasecurity nvr4108hs-4ks2\/l firmware
- dahuasecurity nvr4108hs-4ks3\(960g\) firmware
- dahuasecurity nvr4108hs-4ks3 firmware
- dahuasecurity nvr4108hs-8p-4ks2\/l firmware
- dahuasecurity nvr4108hs-8p-4ks3 firmware
- dahuasecurity nvr4108hs-p-4ks2\/l firmware
- dahuasecurity nvr4108hs-p-4ks3 firmware
- dahuasecurity nvr4116-4ks2\/l firmware
- dahuasecurity nvr4116-4ks3 firmware
- dahuasecurity nvr4116-8p-4ks2\/l firmware
- dahuasecurity nvr4116-8p-4ks3 firmware
- dahuasecurity nvr4116hs-4ks2\/l firmware
- dahuasecurity nvr4116hs-4ks3 firmware
- dahuasecurity nvr4116hs-8p-4ks2\/l firmware
- dahuasecurity nvr4116hs-8p-4ks3 firmware
- dahuasecurity nvr4204-4ks2\/l firmware
- dahuasecurity nvr4204-4ks3 firmware
- dahuasecurity nvr4204-p-4ks2\/l firmware
- dahuasecurity nvr4204-p-4ks3 firmware
- dahuasecurity nvr4208-4ks2\/l firmware
- dahuasecurity nvr4208-4ks3 firmware
- dahuasecurity nvr4208-8p-4ks2\/l firmware
- dahuasecurity nvr4208-8p-4ks3 firmware
- dahuasecurity nvr4216-16p-4ks2\/l firmware
- dahuasecurity nvr4216-16p-4ks3 firmware
- dahuasecurity nvr4216-4ks2\/l firmware
- dahuasecurity nvr4216-4ks3 firmware
- dahuasecurity nvr4232-16p-4ks2\/l firmware
- dahuasecurity nvr4232-16p-4ks3 firmware
- dahuasecurity nvr4232-4ks2\/l firmware
- dahuasecurity nvr4232-4ks3 firmware
- dahuasecurity nvr4416-16p-4ks2\/i firmware
- dahuasecurity nvr4416-4ks2\/i firmware
- dahuasecurity nvr4432-16p-4ks2\/i firmware
- dahuasecurity nvr4432-4ks2\/i firmware
- dahuasecurity nvr4816-16p-4ks2\/i firmware
- dahuasecurity nvr4816-4ks2\/i firmware
- dahuasecurity nvr4832-16p-4ks2\/i firmware
- dahuasecurity nvr4832-4ks2\/i firmware
- dahuasecurity nvr4832-i
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-39950 is a high vulnerability (CVSS 8.6) in Dahua Nvr4xxx And Ipc-hx8xxx, published July 31, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. No source names a fixed version.