dahuasecurity Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dahuasecurity/ Sun, 26 Feb 2023 06:35:03 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png dahuasecurity Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dahuasecurity/ 32 32 CVE-2019-9679 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9679/ Sun, 26 Feb 2023 06:35:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9679/ Some of Dahua’s Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.

The post CVE-2019-9679 appeared first on CVE Vulnerability.

]]> Some of Dahua’s Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.

The post CVE-2019-9679 appeared first on CVE Vulnerability.

]]> CVE-2019-9680 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9680/ Sun, 26 Feb 2023 06:35:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9680/ Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.

The post CVE-2019-9680 appeared first on CVE Vulnerability.

]]> Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.

The post CVE-2019-9680 appeared first on CVE Vulnerability.

]]> CVE-2019-9681 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9681/ Sun, 26 Feb 2023 06:35:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9681/ Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.

The post CVE-2019-9681 appeared first on CVE Vulnerability.

]]> Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.

The post CVE-2019-9681 appeared first on CVE Vulnerability.

]]> CVE-2019-9682 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9682/ Sun, 26 Feb 2023 06:35:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9682/ Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device […]

The post CVE-2019-9682 appeared first on CVE Vulnerability.

]]> Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.

The post CVE-2019-9682 appeared first on CVE Vulnerability.

]]> CVE-2019-9676 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9676/ Sun, 26 Feb 2023 06:35:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9676/ Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11. The vulnerability exits in the function of redirection display for serial port printing information, which can not be used by product basic functions. After an attacker logs in locally, this vulnerability can be exploited to cause device restart or arbitrary code […]

The post CVE-2019-9676 appeared first on CVE Vulnerability.

]]> Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11. The vulnerability exits in the function of redirection display for serial port printing information, which can not be used by product basic functions. After an attacker logs in locally, this vulnerability can be exploited to cause device restart or arbitrary code execution. Dahua has identified the corresponding security problems in the static code auditing process, so it has gradually deleted this function, which is no longer available in the newer devices and softwares. Dahua has released versions of the affected products to fix the vulnerability.

The post CVE-2019-9676 appeared first on CVE Vulnerability.

]]> CVE-2019-9677 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9677/ Sun, 26 Feb 2023 06:35:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9677/ The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.

The post CVE-2019-9677 appeared first on CVE Vulnerability.

]]> The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.

The post CVE-2019-9677 appeared first on CVE Vulnerability.

]]> CVE-2019-9678 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9678/ Sun, 26 Feb 2023 06:35:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9678/ Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.

The post CVE-2019-9678 appeared first on CVE Vulnerability.

]]> Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.

The post CVE-2019-9678 appeared first on CVE Vulnerability.

]]>