Dahua Technologies

Records58All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

Dahua Technologies records in CISA KEV

TI-2021-12645 Dahua IP Camera Authentication Bypass Vulnerability CRITICAL 100KEV 2024-08-21 TI-2021-12646 Dahua IP Camera Authentication Bypass Vulnerability CRITICAL 100KEV 2024-08-21

Components

Products in the NVD configurations · select one to filter the records

Dhi-dss4004-s2 Firmware 12 records MEDIUM Dhi-dss7016d-s2 Firmware 12 records MEDIUM Dhi-dss7016dr-s2 Firmware 12 records MEDIUM Dss Express 12 records MEDIUM Dss Professional 12 records MEDIUM Nvr4416-16p-4ks2/i Firmware 8 records MEDIUM Nvr4416-4ks2/i Firmware 8 records MEDIUM Nvr4432-16p-4ks2/i Firmware 8 records MEDIUM

Records

8 records in Nvr4416-4ks2/i Firmware · all components

TI-2024-26838 CVE-2024-39950 · GHSA-x56v-vwr6-4gfg

Stack-based buffer overflow in Dahua NVR4XXX and IPC-HX8XXX

MEDIUM 49

A vulnerability has been found in Dahua products.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00492 Published 2024-07-31 No fix listed CWE-121

TI-2024-26837 CVE-2024-39949 · GHSA-vx79-rj6m-r29g

Reachable assertion in Dahua NVR4XXX

MEDIUM 40

A vulnerability has been found in Dahua products.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0056 Published 2024-07-31 No fix listed CWE-617

TI-2024-26836 CVE-2024-39948 · GHSA-94cv-f96h-hxfx

NULL pointer dereference in Dahua NVR4XXX

MEDIUM 40

A vulnerability has been found in Dahua products.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0056 Published 2024-07-31 No fix listed CWE-476

TI-2024-26832 CVE-2024-39944 · GHSA-9vf3-7mcj-9xqp

Resource allocation without limits in Dahua IPC-HX8XXX and NVR4XXX

MEDIUM 40

A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0056 Published 2024-07-31 No fix listed CWE-770

TI-2024-26834 CVE-2024-39946 · GHSA-fvg9-f4xc-69j2

A vulnerability has been found in Dahua products.After obtaining the administrator's…

LOW 32

A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing device init…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00437 Published 2024-07-31 No fix listed

TI-2022-12715 CVE-2022-30564 · GHSA-4qcf-7phg-fpvq

Improper access control in…

LOW 30

Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00438 Published 2023-02-09 No fix listed CWE-284

TI-2024-26835 CVE-2024-39947 · GHSA-mj68-5w84-cr6g

A vulnerability has been found in Dahua products.After obtaining the ordinary user's…

LOW 29

A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00458 Published 2024-07-31 No fix listed

TI-2024-26833 CVE-2024-39945 · GHSA-rr22-7m4r-xf6r

A vulnerability has been found in Dahua products.

LOW 23

A vulnerability has been found in Dahua products.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00458 Published 2024-07-31 No fix listed CWE-703

Open these records in search →