Read the docs
TI-2019-02954 Aliases CVE-2019-3948GHSA-f9fm-89ph-x8pr

Missing authentication in Dahua IPC-XXBXX

Priority MEDIUM 54CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-306.

Summary

The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX V2.640.0000000.2.R and V2.623.0000000.1.R, Dahua NVR5XX-4KS2 V3.216.0000006.0.R, Dahua NVR4XXX-4KS2 V3.216.0000006.0.R, and NVR2XXX-4KS2 do not require authentication to access the HTTP endpoint /videotalk. An unauthenticated, remote person can connect to this endpoint and potentionally listen to the audio of the capturing device.

Why it matters now

EPSS 0.25018 97th percentileScored 2026-11-08
Public exploit Yes 2 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Dahua IPC-XXBXXV2.622.0000000.9.R—No fix listedCNA
—Dahua IPC HX5X3X and HX4X3XV2.800.0000008.0.R—No fix listedCNA
—Dahua DH-IPC HX883X and DH-IPC-HX863XV2.622.0000000.7.R—No fix listedCNA
—Dahua DH-SD4XXXXXV2.623.0000000.7.R—No fix listedCNA
—Dahua DH-SD5XXXXXV2.623.0000000.1.R—No fix listedCNA
—Dahua DH-SD6XXXXXV2.640.0000000.2.R and V2.623.0000000.1.R—No fix listedCNA
—Dahua NVR5XX-4KS2V3.216.0000006.0.R—No fix listedCNA
—Dahua NVR4XXX-4KS2V3.216.0000006.0.R and NVR2XXX-4KS2—No fix listedCNA
  • Dahua IPC-XXBXX Vendor— Affected V2.622.0000000.9.R Fixed in — No fix listed CNA
  • Dahua IPC HX5X3X and HX4X3X Vendor— Affected V2.800.0000008.0.R Fixed in — No fix listed CNA
  • Dahua DH-IPC HX883X and DH-IPC-HX863X Vendor— Affected V2.622.0000000.7.R Fixed in — No fix listed CNA
  • Dahua DH-SD4XXXXX Vendor— Affected V2.623.0000000.7.R Fixed in — No fix listed CNA
  • Dahua DH-SD5XXXXX Vendor— Affected V2.623.0000000.1.R Fixed in — No fix listed CNA
  • Dahua DH-SD6XXXXX Vendor— Affected V2.640.0000000.2.R and V2.623.0000000.1.R Fixed in — No fix listed CNA
  • Dahua NVR5XX-4KS2 Vendor— Affected V3.216.0000006.0.R Fixed in — No fix listed CNA
  • Dahua NVR4XXX-4KS2 Vendor— Affected V3.216.0000006.0.R and NVR2XXX-4KS2 Fixed in — No fix listed CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:o:amcrest:ip2m-841b_firmware:2.520.ac00.18.r:*:*:*:*:*:*:*2.520.ac00.18.rVulnerableAmcrest
cpe:2.3:h:amcrest:ip2m-841b:-:*:*:*:*:*:*:*not specified by NVDRunning onAmcrest
cpe:2.3:o:dahua:dh-ipc-hx863x:*:*:*:*:*:*:*:*before 2018-05-18VulnerableDahua
cpe:2.3:o:dahua:dh-ipc-hx883x:*:*:*:*:*:*:*:*before 2018-05-18VulnerableDahua
cpe:2.3:o:dahua:dh-sd4xxxxx:*:*:*:*:*:*:*:*before 2018-05-18VulnerableDahua
cpe:2.3:o:dahua:dh-sd5xxxxx:*:*:*:*:*:*:*:*before 2018-05-18VulnerableDahua
cpe:2.3:o:dahua:dh-sd6xxxxx:*:*:*:*:*:*:*:*before 2018-05-18VulnerableDahua
cpe:2.3:o:dahua:ipc-hx4x3x:*:*:*:*:*:*:*:*before 2018-05-18VulnerableDahua
cpe:2.3:o:dahua:ipc-hx5x3x:*:*:*:*:*:*:*:*before 2018-05-18VulnerableDahua
cpe:2.3:o:dahua:ipc-xxbxx:*:*:*:*:*:*:*:*before 2018-05-18VulnerableDahua
  • cpe:2.3:o:amcrest:ip2m-841b_firmware:2.520.ac00.18.r:*:*:*:*:*:*:* Versions 2.520.ac00.18.r Vulnerable ·Amcrest
  • cpe:2.3:h:amcrest:ip2m-841b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Amcrest
  • cpe:2.3:o:dahua:dh-ipc-hx863x:*:*:*:*:*:*:*:* Versions before 2018-05-18 Vulnerable ·Dahua
  • cpe:2.3:o:dahua:dh-ipc-hx883x:*:*:*:*:*:*:*:* Versions before 2018-05-18 Vulnerable ·Dahua
  • cpe:2.3:o:dahua:dh-sd4xxxxx:*:*:*:*:*:*:*:* Versions before 2018-05-18 Vulnerable ·Dahua
  • cpe:2.3:o:dahua:dh-sd5xxxxx:*:*:*:*:*:*:*:* Versions before 2018-05-18 Vulnerable ·Dahua
  • cpe:2.3:o:dahua:dh-sd6xxxxx:*:*:*:*:*:*:*:* Versions before 2018-05-18 Vulnerable ·Dahua
  • cpe:2.3:o:dahua:ipc-hx4x3x:*:*:*:*:*:*:*:* Versions before 2018-05-18 Vulnerable ·Dahua
  • cpe:2.3:o:dahua:ipc-hx5x3x:*:*:*:*:*:*:*:* Versions before 2018-05-18 Vulnerable ·Dahua
  • cpe:2.3:o:dahua:ipc-xxbxx:*:*:*:*:*:*:*:* Versions before 2018-05-18 Vulnerable ·Dahua
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:dahua:nvr2xxx-4ks2:*:*:*:*:*:*:*:*before 2018-05-18VulnerableDahua
cpe:2.3:o:dahua:nvr4xxx-4ks2:*:*:*:*:*:*:*:*before 2018-05-18VulnerableDahua
cpe:2.3:o:dahua:nvr5xxx-4ks2:*:*:*:*:*:*:*:*before 2018-05-18VulnerableDahua
  • cpe:2.3:o:dahua:nvr2xxx-4ks2:*:*:*:*:*:*:*:* Versions before 2018-05-18 Vulnerable ·Dahua
  • cpe:2.3:o:dahua:nvr4xxx-4ks2:*:*:*:*:*:*:*:* Versions before 2018-05-18 Vulnerable ·Dahua
  • cpe:2.3:o:dahua:nvr5xxx-4ks2:*:*:*:*:*:*:*:* Versions before 2018-05-18 Vulnerable ·Dahua

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-3948
  2. 2026-10-03 Alias added: GHSA-f9fm-89ph-x8pr

References

Exploit 2

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences