Skip to content
Dahua vulnerabilities
Newest
-
dahua intelligent connection center
Dahua Intelligent Connection Center command injection
CVE-2025-31704
9.8 Critical
-
dahua ipc/sd/nvr/xvr/evs/vto/vth/asi/tpc
A vulnerability has been found in some Dahua products could
allow an unauthenticated remote...
CVE-2026-29116
Public exploit
8.7 High
-
dahua ipc/sd
A vulnerability has been found in some Dahua products could allow an authenticated remote...
CVE-2026-29115
Public exploit
6.9 Medium
-
dahua ipc
A vulnerability has been found in some Dahua products. An attacker
may obtain the device’s CA...
CVE-2026-29114
Public exploit
2.3 Low
-
dahua nvr2-4ks3, xvr1b16h-i/t, xvr4232an-i/t +2 more
A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical...
CVE-2025-31703
2.4 Low
-
dahua ipc, sd +1 more
A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with...
CVE-2025-31702
Public exploit
6.8 Medium
-
dahua ipc, sd +1 more
A vulnerability has been found in Dahua products.
Attackers could exploit a buffer overflow...
CVE-2025-31701
8.1 High
-
dahua ipc, sd +1 more
A vulnerability has been found in Dahua products.
Attackers could exploit a buffer overflow...
CVE-2025-31700
Public exploit
8.1 High
-
dahua ipc-hdw1200s, ipc-hfw1200s, ipc-hfw2300r-z +1 more +3 more
Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal
CVE-2024-13130
5.3 Medium
-
dahua nvr4xxx and ipc-hx8xxx, dahuasecurity ipc-hf8xxx firmware, ipc-hfs8449g-z7-led firmware +59 more +61 more
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data...
CVE-2024-39950
8.6 High
-
dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +55 more +57 more
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data...
CVE-2024-39949
7.5 High
-
dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +55 more +57 more
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data...
CVE-2024-39948
7.5 High
-
dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +54 more +56 more
A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and...
CVE-2024-39947
6.5 Medium
-
dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +54 more +56 more
A vulnerability has been found in Dahua products.After obtaining the administrator's username and...
CVE-2024-39946
6.0 Medium
-
dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +54 more +56 more
A vulnerability has been found in Dahua products. After
obtaining the administrator's username...
CVE-2024-39945
4.9 Medium
-
dahua ipc-hx8xxx and nvr4xxx, dahuasecurity ipc-hf8xxx firmware, ipc-hfs8449g-z7-led firmware +59 more +61 more
A vulnerability has been found in Dahua products.Attackers
can send carefully crafted data...
CVE-2024-39944
7.5 High
-
dahua smart park management, dahuasecurity smart parking management +1 more
Dahua Smart Park Management unrestricted upload
CVE-2023-3836
Public exploit
EPSS 73.7%
6.3 Medium
-
dahua smart parking management
Dahua Smart Parking Management image server-side request forgery
CVE-2023-3121
3.5 Low
-
dahua ip camera firmware, dahuasecurity ipc-hum7xxx firmware, ipc-hx3xxx firmware +16 more +18 more
The identity authentication bypass vulnerability found in some Dahua products during the login...
CVE-2021-33045
In KEVPublic exploit
EPSS 99.6%
9.8 Critical
-
dahua ip camera firmware, dahuasecurity ipc-hum7xxx firmware, ipc-hx3xxx firmware +17 more +19 more
The identity authentication bypass vulnerability found in some Dahua products during the login...
CVE-2021-33044
In KEVPublic exploit
EPSS 100.0%
9.8 Critical
-
dahua sd, dedicated micros ds2, dv-ip express +22 more +24 more
Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning...
CVE-2015-2909
9.8 Critical
-
dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 more
The specific fields of CGI interface of some Dahua products are not strictly verified, an...
CVE-2019-9677
9.8 Critical
-
dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 more
Some Dahua products have the problem of denial of service during the login process. An attacker...
CVE-2019-9678
7.5 High
-
dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 more
Some Dahua products have information leakage issues. Attackers can obtain the IP address and...
CVE-2019-9680
5.3 Medium
-
dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 more
Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use...
CVE-2019-9679
8.8 High
-
dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 more
Online upgrade information in some firmware packages of Dahua products is not encrypted....
CVE-2019-9681
5.3 Medium
-
dahua dh-ipc-hx863x, dh-sd4xxxxx, dh-sd5xxxxx +9 more +11 more
The Amcrest IP2M-841B IP camera firmware version V2.520.AC00.18.R does not require authentication...
CVE-2019-3948
Public exploit
EPSS 25.0%
7.5 High
-
bos ip camera, dahuasecurity ip camera firmware +1 more
Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow
CVE-2017-3223
9.8 Critical