9.8
Critical
CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Ransomware campaigns
Not observed so far
Weakness
CWE-287
Description
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Some Dahua IP Camera, Video Intercom, NVR, XVR devices | Versions not published |