Dahua

Records23All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Dahua records in CISA KEV

TI-2021-12645 Dahua IP Camera Authentication Bypass Vulnerability CRITICAL 100KEV 2024-08-21 TI-2021-12646 Dahua IP Camera Authentication Bypass Vulnerability CRITICAL 100KEV 2024-08-21

Components

Products in the NVD configurations · select one to filter the records

Dh-ipc-hx863x 1 record MEDIUM Dh-ipc-hx883x 1 record MEDIUM Dh-sd4xxxxx 1 record MEDIUM Dh-sd5xxxxx 1 record MEDIUM Dh-sd6xxxxx 1 record MEDIUM Ipc-hx4x3x 1 record MEDIUM Ipc-hx5x3x 1 record MEDIUM Ipc-xxbxx 1 record MEDIUM

Records

23 records

TI-2021-12646 CVE-2021-33045 · GHSA-9vwj-hj2h-whjq

Improper authentication in Some Dahua IP Camera, Video Intercom, NVR, XVR devices

CRITICAL 100KEV

The identity authentication bypass vulnerability found in some Dahua products during the login process.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99593 Published 2021-09-15 No fix listed CWE-287

TI-2021-12645 CVE-2021-33044 · GHSA-h2j4-m7qg-8m4g

Improper authentication in Some Dahua IP Camera, Video Intercom, PTZ Dome Camera, Thermal…

CRITICAL 100KEV

The identity authentication bypass vulnerability found in some Dahua products during the login process.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99989 Published 2021-09-15 No fix listed CWE-287

TI-2023-03585 CVE-2023-3836 · GHSA-v896-jp39-6pqh

Dahua Smart Park Management unrestricted upload

HIGH 80

A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.7367 Published 2023-07-22 No fix listed CWE-434

TI-2024-12178 CVE-2024-13130 · GHSA-fq22-566f-cfhj

Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal

MEDIUM 57

A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00594 Published 2025-01-05 No fix listed CWE-23

TI-2019-02954 CVE-2019-3948 · GHSA-f9fm-89ph-x8pr

Missing authentication in Dahua IPC-XXBXX

MEDIUM 54

The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R,…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.25018 Published 2019-07-29 No fix listed CWE-306

TI-2025-43987 CVE-2025-31704 · GHSA-9248-6x5c-955r

Command injection in Dahua Intelligent Connection Center

MEDIUM 52

A vulnerability has been found in the Dahua Intelligent Connection Center.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01364 Published 2026-10-30 Fixed in V5.000.0000000.15 CWE-78

TI-2017-02426 CVE-2017-3223 · GHSA-4vg2-f4g9-pc4r

Stack-based buffer overflow in Dahua IP Camera

MEDIUM 50

Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05219 Published 2018-07-24 Fixed in DH_IPC-Consumer-Zi-Themis_Eng_P_V2.408.0000.11.R.20170621 CWE-121

TI-2024-26838 CVE-2024-39950 · GHSA-x56v-vwr6-4gfg

Stack-based buffer overflow in Dahua NVR4XXX and IPC-HX8XXX

MEDIUM 49

A vulnerability has been found in Dahua products.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00492 Published 2024-07-31 No fix listed CWE-121

TI-2026-23257 CVE-2026-29116 · GHSA-6jj8-ccgg-jxw2

Reachable assertion in Dahua IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC

MEDIUM 44

A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpectedly, resulting in…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00553 Published 2026-06-10 No fix listed CWE-617

TI-2024-26837 CVE-2024-39949 · GHSA-vx79-rj6m-r29g

Reachable assertion in Dahua NVR4XXX

MEDIUM 40

A vulnerability has been found in Dahua products.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0056 Published 2024-07-31 No fix listed CWE-617

TI-2024-26836 CVE-2024-39948 · GHSA-94cv-f96h-hxfx

NULL pointer dereference in Dahua NVR4XXX

MEDIUM 40

A vulnerability has been found in Dahua products.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0056 Published 2024-07-31 No fix listed CWE-476

TI-2024-26832 CVE-2024-39944 · GHSA-9vf3-7mcj-9xqp

Resource allocation without limits in Dahua IPC-HX8XXX and NVR4XXX

MEDIUM 40

A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0056 Published 2024-07-31 No fix listed CWE-770

TI-2025-22844 CVE-2025-31701 · GHSA-2qpp-9v9c-5979

Buffer overflow in Dahua IPC

LOW 39

A vulnerability has been found in Dahua products.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00874 Published 2025-07-23 No fix listed CWE-120

TI-2025-22843 CVE-2025-31700 · GHSA-58gx-pg7f-pm8j

Buffer overflow in Dahua IPC

LOW 39

A vulnerability has been found in Dahua products.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00912 Published 2025-07-23 No fix listed CWE-120

TI-2025-22845 CVE-2025-31702 · GHSA-5x9h-fg8g-wjh2

Incorrect permission assignment in Dahua IPC

LOW 33

A vulnerability exists in certain Dahua embedded products.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00475 Published 2025-10-15 No fix listed CWE-732

TI-2024-26834 CVE-2024-39946 · GHSA-fvg9-f4xc-69j2

A vulnerability has been found in Dahua products.After obtaining the administrator's…

LOW 32

A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing device init…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00437 Published 2024-07-31 No fix listed

TI-2026-23256 CVE-2026-29115 · GHSA-8v9p-fgh7-hrp2

Reachable assertion in Dahua IPC/SD

LOW 31

A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpectedly, resulting in a…

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00506 Published 2026-06-10 No fix listed CWE-617

TI-2024-26835 CVE-2024-39947 · GHSA-mj68-5w84-cr6g

A vulnerability has been found in Dahua products.After obtaining the ordinary user's…

LOW 29

A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00458 Published 2024-07-31 No fix listed

TI-2019-07085 CVE-2019-9681 · GHSA-c3w2-cxh2-39vq

Online upgrade information in some firmware packages of Dahua products is not encrypted.

LOW 25

Online upgrade information in some firmware packages of Dahua products is not encrypted.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00784 Published 2019-09-17 No fix listed CWE-311

TI-2024-26833 CVE-2024-39945 · GHSA-rr22-7m4r-xf6r

A vulnerability has been found in Dahua products.

LOW 23

A vulnerability has been found in Dahua products.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00458 Published 2024-07-31 No fix listed CWE-703

TI-2023-02925 CVE-2023-3121 · GHSA-r9xh-6hxc-484v

Dahua Smart Parking Management image server-side request forgery

LOW 22

A vulnerability has been found in Dahua Smart Parking Management up to 20230528 and classified as problematic.

CVSS 3.1MEDIUM 4.6 Adjacent network Low privileges No interaction EPSS 0.00461 Published 2023-06-06 No fix listed CWE-918

TI-2025-22846 CVE-2025-31703 · GHSA-26qr-26wf-xv6x

Authentication bypass in Dahua NVR2-4KS3

LOW 12

A vulnerability found in Dahua NVR/XVR device.

CVSS 4.0LOW 2.4 Physical No auth No interaction EPSS 0.00296 Published 2026-03-18 No fix listed CWE-305

TI-2026-23255 CVE-2026-29114 · GHSA-9359-w3rx-353r

A vulnerability has been found in some Dahua products.

LOW 11

A vulnerability has been found in some Dahua products.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.0019 Published 2026-06-10 No fix listed CWE-538

Open these records in search →

Critical	6
High	8
Medium	7
Low	2
No CVSS	0