Read the docs
TI-2021-12645 Aliases CVE-2021-33044GHSA-h2j4-m7qg-8m4g

Improper authentication in Some Dahua IP Camera, Video Intercom, PTZ Dome Camera, Thermal…

Priority CRITICAL 100Exploited in the wildCWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-287.

Summary

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

Why it matters now

Exploitation Active In CISA KEV since 2024-08-21CISA due date 2024-09-11
EPSS 0.99989 99th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Some Dahua IP Camera, Video Intercom, PTZ Dome Camera, Thermal Camera devicesDahua IP Camera devices IPC-HX3XXX, IPC-HX5XXX, and IPC-HUM7XXX, Video Intercom devices VTO75X95X, VTO65XXX, and VTH542XH, PTZ Dome Camera SD1A1, SD22, SD49, SD50, SD52C, and SD6AL, Thermal TPC-BF1241, TPC-BF2221, TPC-SD2221, TPC-BF5XXX, TPC-SD8X21, and TPC-PT8X21B devices Buildtime before June, 2021.—No fix listedCNA
  • Some Dahua IP Camera, Video Intercom, PTZ Dome Camera, Thermal Camera devices Vendor— Affected Dahua IP Camera devices IPC-HX3XXX, IPC-HX5XXX, and IPC-HUM7XXX, Video Intercom devices VTO75X95X, VTO65XXX, and VTH542XH, PTZ Dome Camera SD1A1, SD22, SD49, SD50, SD52C, and SD6AL, Thermal TPC-BF1241, TPC-BF2221, TPC-SD2221, TPC-BF5XXX, TPC-SD8X21, and TPC-PT8X21B devices Buildtime before June, 2021. Fixed in — No fix listed CNA

CPE configurations NVD · 38

CPEVersionsRoleVendor
cpe:2.3:o:dahuasecurity:ipc-hum7xxx_firmware:*:*:*:*:*:*:*:*before 2.820.0000000.5.r.210705VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:ipc-hum7xxx:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:ipc-hx3xxx_firmware:*:*:*:*:*:*:*:*before 2.800.0000000.29.r.210630VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:ipc-hx3xxx:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:ipc-hx5xxx_firmware:*:*:*:*:*:*:*:*before 2.820.0000000.18.r.210705VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:ipc-hx5xxx:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:sd1a1_firmware:*:*:*:*:*:*:*:*before 2.812.0000007.0.r.210706VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:sd1a1:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:sd22_firmware:*:*:*:*:*:*:*:*before 2.812.0000007.0.r.210706VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:sd22:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
  • cpe:2.3:o:dahuasecurity:ipc-hum7xxx_firmware:*:*:*:*:*:*:*:* Versions before 2.820.0000000.5.r.210705 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:ipc-hum7xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:ipc-hx3xxx_firmware:*:*:*:*:*:*:*:* Versions before 2.800.0000000.29.r.210630 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:ipc-hx3xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:ipc-hx5xxx_firmware:*:*:*:*:*:*:*:* Versions before 2.820.0000000.18.r.210705 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:ipc-hx5xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:sd1a1_firmware:*:*:*:*:*:*:*:* Versions before 2.812.0000007.0.r.210706 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:sd1a1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:sd22_firmware:*:*:*:*:*:*:*:* Versions before 2.812.0000007.0.r.210706 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:sd22:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
Show 28 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:dahuasecurity:sd49_firmware:*:*:*:*:*:*:*:*before 2.812.0000007.0.r.210706VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:sd49:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:sd50_firmware:*:*:*:*:*:*:*:*before 2.812.0000007.0.r.210706VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:sd50:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:sd52c_firmware:*:*:*:*:*:*:*:*before 2.812.0000007.0.r.210706VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:sd52c:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:sd6al_firmware:*:*:*:*:*:*:*:*before 2.812.0000007.0.r.210706VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:sd6al:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:tpc-bf1241_firmware:*:*:*:*:*:*:*:*before 2.630.0000000.6.r.210707VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:tpc-bf1241:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:tpc-bf2221_firmware:*:*:*:*:*:*:*:*before 2.630.0000000.10.r.210707VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:tpc-bf2221:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:tpc-bf5x01_firmware:*:*:*:*:*:*:*:*before 2.630.0000000.12.r.210707VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:tpc-bf5x01:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:tpc-pt8x21b_firmware:*:*:*:*:*:*:*:*before 2.630.0000000.10.r.210701VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:tpc-pt8x21b:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:tpc-sd2221_firmware:*:*:*:*:*:*:*:*up to 2.630.0000000.7.r.210707VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:tpc-sd2221:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:tpc-sd8x21_firmware:*:*:*:*:*:*:*:*before 2.630.0000000.9.r.210706VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:tpc-sd8x21:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:vto-65xxx_firmware:*:*:*:*:*:*:*:*before 4.300.0000004.0.r.210715VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:vto-65xxx:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:vto-75x95x_firmware:*:*:*:*:*:*:*:*before 4.300.0000003.0.r.210714VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:vto-75x95x:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:vth-542xh_firmware:*:*:*:*:*:*:*:*before 4.500.0000002.0.r.210715VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:vth-542xh:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
cpe:2.3:o:dahuasecurity:tpc-bf5x21_firmware:*:*:*:*:*:*:*:*before 2.630.0000000.8.r.210630VulnerableDahua Technologies
cpe:2.3:h:dahuasecurity:tpc-bf5x21:-:*:*:*:*:*:*:*not specified by NVDRunning onDahua Technologies
  • cpe:2.3:o:dahuasecurity:sd49_firmware:*:*:*:*:*:*:*:* Versions before 2.812.0000007.0.r.210706 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:sd49:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:sd50_firmware:*:*:*:*:*:*:*:* Versions before 2.812.0000007.0.r.210706 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:sd50:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:sd52c_firmware:*:*:*:*:*:*:*:* Versions before 2.812.0000007.0.r.210706 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:sd52c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:sd6al_firmware:*:*:*:*:*:*:*:* Versions before 2.812.0000007.0.r.210706 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:sd6al:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:tpc-bf1241_firmware:*:*:*:*:*:*:*:* Versions before 2.630.0000000.6.r.210707 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:tpc-bf1241:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:tpc-bf2221_firmware:*:*:*:*:*:*:*:* Versions before 2.630.0000000.10.r.210707 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:tpc-bf2221:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:tpc-bf5x01_firmware:*:*:*:*:*:*:*:* Versions before 2.630.0000000.12.r.210707 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:tpc-bf5x01:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:tpc-pt8x21b_firmware:*:*:*:*:*:*:*:* Versions before 2.630.0000000.10.r.210701 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:tpc-pt8x21b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:tpc-sd2221_firmware:*:*:*:*:*:*:*:* Versions up to 2.630.0000000.7.r.210707 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:tpc-sd2221:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:tpc-sd8x21_firmware:*:*:*:*:*:*:*:* Versions before 2.630.0000000.9.r.210706 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:tpc-sd8x21:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:vto-65xxx_firmware:*:*:*:*:*:*:*:* Versions before 4.300.0000004.0.r.210715 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:vto-65xxx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:vto-75x95x_firmware:*:*:*:*:*:*:*:* Versions before 4.300.0000003.0.r.210714 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:vto-75x95x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:vth-542xh_firmware:*:*:*:*:*:*:*:* Versions before 4.500.0000002.0.r.210715 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:vth-542xh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies
  • cpe:2.3:o:dahuasecurity:tpc-bf5x21_firmware:*:*:*:*:*:*:*:* Versions before 2.630.0000000.8.r.210630 Vulnerable ·Dahua Technologies
  • cpe:2.3:h:dahuasecurity:tpc-bf5x21:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dahua Technologies

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2024-08-21 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2021-33044
  3. 2026-10-03 Alias added: GHSA-h2j4-m7qg-8m4g

References

Exploit 2

Advisory 1

  • TI-2021-12646 Improper authentication in Some Dahua IP Camera, Video Intercom, NVR, XVR devices KEVCVSS 3.1CRITICAL 9.8
  • TI-2023-03585 Dahua Smart Park Management unrestricted upload CVSS 3.1CRITICAL 9.8
  • TI-2024-12178 Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal CVSS 4.0MEDIUM 5.3
  • TI-2019-02954 Missing authentication in Dahua IPC-XXBXX CVSS 3.0HIGH 7.5
  • TI-2025-43987 Command injection in Dahua Intelligent Connection Center CVSS 3.1CRITICAL 9.8
  • TI-2017-02426 Stack-based buffer overflow in Dahua IP Camera CVSS 3.0CRITICAL 9.8
See all 22 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences