CVE-2021-33044 KEV
9.8
CRITICAL · CVSS 3.1 · EPSS 100% (pctl 100)
Patch first
On CISA KEV — known exploited in the wild, due 2024-09-11.
Description
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 99.99% — more likely to be exploited than 100% of all CVEs |
| Weakness | CWE-287 |
| On CISA KEV | yes — remediate by 2024-09-11 |
| Public exploit | none known |
| Published | 2021-09-15 |
| Last modified | 2026-06-17 |
CISA KEV
| Name | Dahua IP Camera Authentication Bypass Vulnerability |
|---|---|
| Added | 2024-08-21 |
| Due | 2024-09-11 |
| Vendor / product | Dahua / IP Camera Firmware |
| Ransomware use | none reported |
Affected (38)
| Vendor | Product |
|---|---|
| dahuasecurity | ipc-hum7xxx |
| dahuasecurity | ipc-hum7xxx firmware |
| dahuasecurity | ipc-hx3xxx |
| dahuasecurity | ipc-hx3xxx firmware |
| dahuasecurity | ipc-hx5xxx |
| dahuasecurity | ipc-hx5xxx firmware |
| dahuasecurity | sd1a1 |
| dahuasecurity | sd1a1 firmware |
| dahuasecurity | sd22 |
| dahuasecurity | sd22 firmware |
| dahuasecurity | sd49 |
| dahuasecurity | sd49 firmware |
| dahuasecurity | sd50 |
| dahuasecurity | sd50 firmware |
| dahuasecurity | sd52c |
| dahuasecurity | sd52c firmware |
| dahuasecurity | sd6al |
| dahuasecurity | sd6al firmware |
| dahuasecurity | tpc-bf1241 |
| dahuasecurity | tpc-bf1241 firmware |
| dahuasecurity | tpc-bf2221 |
| dahuasecurity | tpc-bf2221 firmware |
| dahuasecurity | tpc-bf5x01 |
| dahuasecurity | tpc-bf5x01 firmware |
| dahuasecurity | tpc-bf5x21 |
| dahuasecurity | tpc-bf5x21 firmware |
| dahuasecurity | tpc-pt8x21b |
| dahuasecurity | tpc-pt8x21b firmware |
| dahuasecurity | tpc-sd2221 |
| dahuasecurity | tpc-sd2221 firmware |
| dahuasecurity | tpc-sd8x21 |
| dahuasecurity | tpc-sd8x21 firmware |
| dahuasecurity | vth-542xh |
| dahuasecurity | vth-542xh firmware |
| dahuasecurity | vto-65xxx |
| dahuasecurity | vto-65xxx firmware |
| dahuasecurity | vto-75x95x |
| dahuasecurity | vto-75x95x firmware |
References
- http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html
- http://seclists.org/fulldisclosure/2021/Oct/13
- https://www.dahuasecurity.com/support/cybersecurity/details/957
- http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html
- http://seclists.org/fulldisclosure/2021/Oct/13
- https://www.dahuasecurity.com/support/cybersecurity/details/957
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-33044
→ the Explorer · watch your stack · NVD