CVEvulnerability
CVE-2019-9682
8.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-05-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-276
Description
Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.
Affected configurations
• dahuasecurity sd6al firmware (< 2019-12)
• dahuasecurity sd5a firmware (< 2019-12)
• dahuasecurity sd1a firmware (< 2019-12)
• dahuasecurity ptz1a firmware (< 2019-12)
• dahuasecurity sd50 firmware (< 2019-12)
• dahuasecurity sd52c firmware (< 2019-12)
• dahuasecurity ipc-hx5842h firmware (< 2019-12)
• dahuasecurity ipc-hx7842h firmware (< 2019-12)
• dahuasecurity ipc-hx2xxx firmware (< 2019-12)
• dahuasecurity ipc-hxxx5x4x firmware (< 2019-12)
• dahuasecurity n42b1p firmware (< 2019-12)
• dahuasecurity n42b2p firmware (< 2019-12)
• dahuasecurity n42b3p firmware (< 2019-12)
• dahuasecurity n52a4p firmware (< 2019-12)
• dahuasecurity n54a4p firmware (< 2019-12)
• dahuasecurity n52b2p firmware (< 2019-12)
• dahuasecurity n52b5p firmware (< 2019-12)
• dahuasecurity n52b3p firmware (< 2019-12)
• dahuasecurity n54b2p firmware (< 2019-12)
• dahuasecurity ipc-hdbw1320e-w firmware (< 2019-12)
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- https://www.dahuasecurity.com/support/cybersecurity/details/767 Vendor Advisory
- https://www.dahuasecurity.com/support/cybersecurity/details/767 Vendor Advisory