9.8
Critique
CVE-2021-33044 Dahua IP Camera Authentication Bypass Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-287
Description
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Some Dahua IP Camera, Video Intercom, PTZ Dome Camera, Thermal Camera devices | Versions non publiées |