Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-33046

Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dahua

Description

Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Access control vulnerability found in some Dahua products

  • Dahua IP Camera devices IPC-HX3XXX, and IPC-HX5XXXaffected
  • PTZ Dome Camera SD1A1, SD22, SD49, SD50, SD52C, and SD6ALaffected
  • Thermal TPC-BF1241,TPC-BF2221, TPC-SD2221affected
  • VTO2101E, VTOX221E, and ASC2204C devices Buildtime between 2017/7 ~ 2021/7. NVR devices NVR4XXX, and NVR5XXXaffected
  • XVR devices XVR4XXX, and XVR5XXXaffected
  • HCVR devices HCVR7XXX, and HCVR8XXX devices Buildtime between 2017/1 ~ 2021/7.affected

References