CVE Vulnerability

CVE-2019-9682

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.

6.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

8.1 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.dahuasecurity.com/support/cybersecurity/details/767 Vendor Advisory
Configurations

Configuration 1
Information

Published : 2020-05-13 04:15

Updated : 2020-05-18 07:25

NVD link : CVE-2019-9682

Mitre link : CVE-2019-9682

Products Affected

Dahuasecurity

Ipc-hdbw1320e-w

Ipc-hdbw1320e-w Firmware

CWE
CWE-276

Incorrect Default Permissions