Skip to content
Dahuasecurity vulnerabilities
Products
Show 160 moreShow less
Newest
-
dahua nvr4xxx and ipc-hx8xxx, dahuasecurity ipc-hf8xxx firmware, ipc-hfs8449g-z7-led firmware +59 more +61 more
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data...
CVE-2024-39950
8.6 High
-
dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +55 more +57 more
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data...
CVE-2024-39949
7.5 High
-
dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +55 more +57 more
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data...
CVE-2024-39948
7.5 High
-
dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +54 more +56 more
A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and...
CVE-2024-39947
6.5 Medium
-
dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +54 more +56 more
A vulnerability has been found in Dahua products.After obtaining the administrator's username and...
CVE-2024-39946
6.0 Medium
-
dahua nvr4xxx, dahuasecurity nvr4104-4ks2\/l firmware, nvr4104-4ks3 firmware +54 more +56 more
A vulnerability has been found in Dahua products. After
obtaining the administrator's username...
CVE-2024-39945
4.9 Medium
-
dahua ipc-hx8xxx and nvr4xxx, dahuasecurity ipc-hf8xxx firmware, ipc-hfs8449g-z7-led firmware +59 more +61 more
A vulnerability has been found in Dahua products.Attackers
can send carefully crafted data...
CVE-2024-39944
7.5 High
-
dahua smart park management, dahuasecurity smart parking management +1 more
Dahua Smart Park Management unrestricted upload
CVE-2023-3836
Public exploit
EPSS 73.7%
6.3 Medium
-
dahua smart parking management
Dahua Smart Parking Management image server-side request forgery
CVE-2023-3121
3.5 Low
-
dahuasecurity ipc-hf5241f-ze firmware, ipc-hf5442f-ze firmware, ipc-hf5541f-ze firmware +94 more +96 more
Some Dahua embedded products have a vulnerability of unauthorized modification of the device...
CVE-2022-30564
5.3 Medium
-
dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 more
Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests...
CVE-2022-45434
5.9 Medium
-
dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 more
Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote...
CVE-2022-45433
3.7 Low
-
dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 more
Some Dahua software products have a vulnerability of unauthenticated search for devices. After...
CVE-2022-45432
5.3 Medium
-
dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 more
Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server...
CVE-2022-45431
7.5 High
-
dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 more
Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD...
CVE-2022-45430
3.7 Low
-
dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 more
Some Dahua software products have a vulnerability of server-side request forgery (SSRF). An...
CVE-2022-45429
7.5 High
-
dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 more
Some Dahua software products have a vulnerability of sensitive information leakage. After...
CVE-2022-45428
2.7 Low
-
dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 more
Some Dahua software products have a vulnerability of unrestricted upload of file. After obtaining...
CVE-2022-45427
7.2 High
-
dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 more
Some Dahua software products have a vulnerability of unrestricted download of file. After...
CVE-2022-45426
6.5 Medium
-
dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 more
Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An...
CVE-2022-45425
7.5 High
-
dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 more
Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key....
CVE-2022-45424
5.3 Medium
-
dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 more
Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials....
CVE-2022-45423
7.5 High
-
dahuasecurity asi7213x-t1 firmware, asi7213x firmware, asi7223x-a-t1 firmware +37 more +39 more
When an attacker uses a man-in-the-middle attack to sniff the request packets with success...
CVE-2022-30563
7.4 High
-
dahuasecurity asi7213x-t1 firmware, asi7213x firmware, asi7223x-a-t1 firmware +37 more +39 more
If the user enables the https function on the device, an attacker can modify the user’s request...
CVE-2022-30562
4.7 Medium
-
dahuasecurity asi7213x-t1 firmware, asi7213x firmware, asi7223x-a-t1 firmware +37 more +39 more
When an attacker uses a man-in-the-middle attack to sniff the request packets with success...
CVE-2022-30561
5.9 Medium
-
dahuasecurity asi7213x-t1 firmware, asi7213x firmware, asi7223x-a-t1 firmware +37 more +39 more
When an attacker obtaining the administrative account and password, or through a man-in-the...
CVE-2022-30560
7.4 High
-
dahuasecurity asc2204c firmware, hcvr7xxx firmware, hcvr8xxx firmware +25 more +27 more
Some Dahua products have access control vulnerability in the password reset process. Attackers...
CVE-2021-33046
9.8 Critical
-
dahua ip camera firmware, dahuasecurity ipc-hum7xxx firmware, ipc-hx3xxx firmware +16 more +18 more
The identity authentication bypass vulnerability found in some Dahua products during the login...
CVE-2021-33045
In KEVPublic exploit
EPSS 99.6%
9.8 Critical
-
dahua ip camera firmware, dahuasecurity ipc-hum7xxx firmware, ipc-hx3xxx firmware +17 more +19 more
The identity authentication bypass vulnerability found in some Dahua products during the login...
CVE-2021-33044
In KEVPublic exploit
EPSS 100.0%
9.8 Critical
-
dahuasecurity ipc-hdbw1320e-w firmware, ipc-hx2xxx firmware, ipc-hx5842h firmware +17 more +19 more
Some Dahua products with Build time before December 2019 have Session ID predictable...
CVE-2020-9502
9.8 Critical
-
dahuasecurity web p2p
Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud...
CVE-2020-9501
5.5 Medium
-
dahuasecurity ipc-hdbw1320e-w firmware, ipc-hx2xxx firmware, ipc-hx5842h firmware +17 more +19 more
Dahua devices with Build time before December 2019 use strong security login mode by default, but...
CVE-2019-9682
8.1 High
-
dahuasecurity ipc-hx2xxx firmware, ipc-hx5842h firmware, ipc-hx7842h firmware +16 more +18 more
Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the...
CVE-2020-9500
4.9 Medium
-
dahuasecurity ipc-hx2xxx firmware, ipc-hx5842h firmware, ipc-hx7842h firmware +16 more +18 more
Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal...
CVE-2020-9499
7.2 High
-
dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 more
The specific fields of CGI interface of some Dahua products are not strictly verified, an...
CVE-2019-9677
9.8 Critical
-
dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 more
Some Dahua products have the problem of denial of service during the login process. An attacker...
CVE-2019-9678
7.5 High
-
dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 more
Some Dahua products have information leakage issues. Attackers can obtain the IP address and...
CVE-2019-9680
5.3 Medium
-
dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 more
Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use...
CVE-2019-9679
8.8 High
-
dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 more
Online upgrade information in some firmware packages of Dahua products is not encrypted....
CVE-2019-9681
5.3 Medium
-
dahuasecurity ipc-hdw1xxx firmware, ipc-hfw1xxx firmware, ipc-hfw2xxx firmware +2 more
Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC...
CVE-2019-9676
7.8 High
-
bos ip camera, dahuasecurity ip camera firmware +1 more
Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow
CVE-2017-3223
9.8 Critical
-
dahua technologies xvr 5x04, xvr 5x08, xvr 5x16, xvr 7x16, ipc-hdbw4xxx, ipc-hdbw5xxx, dahuasecurity ipc-hdbw4xxx firmware, ipc-hdbw5xxx firmware +4 more +6 more
Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low...
CVE-2017-9317
8.8 High
-
dahua technologies ip camera and ip ptz ipc-hfw1xxx, ipc-hdw1xxx, ipc-hdbw1xxx, ipc-hfw2xxx, ipc-hdw2xxx, ipc-hdbw2xxx, ipc-hfw4xxx, ipc-hdw4xxx, ipc-hdbw4xxx, ipc-hf5xxx, ipc-hfw5xxx, ipc-hdw5xxx, ipc-hdbw5xxx, ipc-hf8xxx, ipc-hfw8xxx, ipc-hdbw8xxx, ipc-ebw8xxx, ipc-pfw8xxx, ipc-pdbw8xxx, ipc-hum8xxx, psd8xxxx, dh-sd2xxxxx, dh-sd4xxxxx, dh-sd5xxxxx, dh-sd6xxxxx, dahuasecurity dh-sd2xxxxx firmware, dh-sd4xxxxx firmware +23 more +25 more
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time...
CVE-2017-9315
9.8 Critical
-
dahua technologies ipc-hdw4300s\nvr11hs\ipc-hfw4x00\ipc-hdw4x00\ipc-hdbw4x00\ipc-hf5x00\ipc-hfw5x00\ipc-hdw5x00\ipc-hdbw5x00\nvr11hs, dahuasecurity ipc-hdbw4x00 firmware, ipc-hdbw5x00 firmware +7 more +9 more
Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP...
CVE-2017-9316
6.5 Medium
-
dahua technologies nvr50xx, vr52xx, vr54xx, vr58xx, dahuasecurity nvr5208-4ks2 firmware, nvr5208-8p-4ks2 firmware +20 more +22 more
Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with...
CVE-2017-9314
8.8 High
-
dahuasecurity dh-hcvr4xxx firmware, dh-hcvr5xxx firmware, dh-ipc-hdbw13a0sn firmware +12 more +14 more
A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH...
CVE-2017-7927
EPSS 36.7%
7.3 High
-
dahuasecurity dh-hcvr4xxx firmware, dh-hcvr5xxx firmware, dh-ipc-hdbw13a0sn firmware +12 more +14 more
A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC...
CVE-2017-7925
EPSS 51.4%
9.8 Critical
-
dahuasecurity ip camera firmware
Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low...
CVE-2017-7253
8.8 High
-
dahuasecurity nvr firmware
An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The...
CVE-2017-6432
8.1 High
-
dahuasecurity camera firmware, nvr firmware, smartpss firmware +2 more
The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06,...
CVE-2017-6343
EPSS 60.3%
8.1 High
- Show olderLoading…