← Back to CVE List
Vulnerability Intelligence Report

CVE-2019-9682

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.

No Active Exploit Signals
CVSS Base Score
8.1
HIGH
EPSS Probability:0.86%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
Authentication
Weaponization
SSVC Action

Affected Products & Versions

Vendor Product Affected Versions
dahuasecurity sd6al_firmware all
dahuasecurity sd6al all
dahuasecurity sd5a_firmware all
dahuasecurity sd5a all
dahuasecurity sd1a_firmware all
dahuasecurity sd1a all
dahuasecurity ptz1a_firmware all
dahuasecurity ptz1a all
dahuasecurity sd50_firmware all
dahuasecurity sd50 all
dahuasecurity sd52c_firmware all
dahuasecurity sd52c all
dahuasecurity ipc-hx5842h_firmware all
dahuasecurity ipc-hx5842h all
dahuasecurity ipc-hx7842h_firmware all
dahuasecurity ipc-hx7842h all
dahuasecurity ipc-hx2xxx_firmware all
dahuasecurity ipc-hx2xxx all
dahuasecurity ipc-hxxx5x4x_firmware all
dahuasecurity ipc-hxxx5x4x all
dahuasecurity n42b1p_firmware all
dahuasecurity n42b1p all
dahuasecurity n42b2p_firmware all
dahuasecurity n42b2p all
dahuasecurity n42b3p_firmware all
dahuasecurity n42b3p all
dahuasecurity n52a4p_firmware all
dahuasecurity n52a4p all
dahuasecurity n54a4p_firmware all
dahuasecurity n54a4p all
dahuasecurity n52b2p_firmware all
dahuasecurity n52b2p all
dahuasecurity n52b5p_firmware all
dahuasecurity n52b5p all
dahuasecurity n52b3p_firmware all
dahuasecurity n52b3p all
dahuasecurity n54b2p_firmware all
dahuasecurity n54b2p all
dahuasecurity ipc-hdbw1320e-w_firmware all
dahuasecurity ipc-hdbw1320e-w all

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
0.860%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityDahua Technologies · Vendor · China
Reserved2019-03-11T00:00:00
Published2020-05-13T15:10:43
Last Updated2024-08-04T21:54:45

LINK COPIED TO CLIPBOARD