ipc-hfw5x2x_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ipc-hfw5x2x_firmware/ Sun, 26 Feb 2023 06:35:03 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png ipc-hfw5x2x_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ipc-hfw5x2x_firmware/ 32 32 CVE-2019-9679 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9679/ Sun, 26 Feb 2023 06:35:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9679/ Some of Dahua’s Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.

The post CVE-2019-9679 appeared first on CVE Vulnerability.

]]> Some of Dahua’s Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.

The post CVE-2019-9679 appeared first on CVE Vulnerability.

]]> CVE-2019-9680 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9680/ Sun, 26 Feb 2023 06:35:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9680/ Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.

The post CVE-2019-9680 appeared first on CVE Vulnerability.

]]> Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.

The post CVE-2019-9680 appeared first on CVE Vulnerability.

]]> CVE-2019-9681 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9681/ Sun, 26 Feb 2023 06:35:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9681/ Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.

The post CVE-2019-9681 appeared first on CVE Vulnerability.

]]> Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.

The post CVE-2019-9681 appeared first on CVE Vulnerability.

]]> CVE-2019-9677 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9677/ Sun, 26 Feb 2023 06:35:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9677/ The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.

The post CVE-2019-9677 appeared first on CVE Vulnerability.

]]> The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.

The post CVE-2019-9677 appeared first on CVE Vulnerability.

]]> CVE-2019-9678 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9678/ Sun, 26 Feb 2023 06:35:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9678/ Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.

The post CVE-2019-9678 appeared first on CVE Vulnerability.

]]> Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.

The post CVE-2019-9678 appeared first on CVE Vulnerability.

]]>