Description (CNA)
Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Access control vulnerability found in some Dahua products | affected Dahua IP Camera devices IPC-HX3XXX, and IPC-HX5XXX; affected PTZ Dome Camera SD1A1, SD22, SD49, SD50, SD52C, and SD6AL; affected Thermal TPC-BF1241,TPC-BF2221, TPC-SD2221; affected VTO2101E, VTOX221E, and ASC2204C devices Buildtime between 2017/7 ~ 2021/7. NVR devices NVR4XXX, and NVR5XXX; affected XVR devices XVR4XXX, and XVR5XXX; affected HCVR devices HCVR7XXX, and HCVR8XXX devices Buildtime between 2017/1 ~ 2021/7. |
CWE
No CWE identifiers supplied.
References
- https://www.dahuasecurity.com/support/cybersecurity/details/957
- https://www.dahuasecurity.com/support/cybersecurity/details/987
- https://support.dahuatech.com/networkSecurity/securityDetails?id=95
ADP enrichment
No English description supplied.