Exploit for #VU96446 Improper Authentication in Dahua Technology products

Vulnerability identifier: #VU96446

Vulnerability risk: Critical

CVSSv4.0: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Red]

CVE-ID: CVE-2021-33044

CWE-ID: CWE-287

Exploitation vector: Network

Exploits in database: 1

• August 23, 2024
  • DahuaLoginBypass (Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.) [Github]

Vulnerable software:
Dahua IPC-HX1XXX
Hardware solutions / Other hardware appliances
Dahua IPC-HX2XXX
Hardware solutions / Other hardware appliances
Dahua IPC-HX3XXX
Hardware solutions / Other hardware appliances
Dahua IPC-HX5(4)(3)XXX
Hardware solutions / Other hardware appliances
Dahua IPC-HX5XXX
Hardware solutions / Other hardware appliances
Dahua IPC-HUM7XXX
Hardware solutions / Other hardware appliances
Dahua IPC-HX8XXX
Hardware solutions / Other hardware appliances
Dahua VTO75X95X
Hardware solutions / Other hardware appliances
Dahua VTO65XXX
Hardware solutions / Other hardware appliances
Dahua DHI-ASI7213Y-V3-T1
Hardware solutions / Other hardware appliances
Dahua VTH542XH
Hardware solutions / Other hardware appliances
Dahua SD1A1
Hardware solutions / Other hardware appliances
Dahua SD22
Hardware solutions / Other hardware appliances
Dahua SD49
Hardware solutions / Other hardware appliances
Dahua SD50
Hardware solutions / Other hardware appliances
Dahua SD52C
Hardware solutions / Other hardware appliances
Dahua SD6AL
Hardware solutions / Other hardware appliances
Dahua TPC-BF1241
Hardware solutions / Other hardware appliances
Dahua TPC-BF2221
Hardware solutions / Other hardware appliances
Dahua TPC-SD2221
Hardware solutions / Other hardware appliances
Dahua TPC-BF5X01
Hardware solutions / Other hardware appliances
Dahua TPC-BF5X21
Hardware solutions / Other hardware appliances
Dahua TPC-SD8X21
Hardware solutions / Other hardware appliances
Dahua TPC-PT8X21B
Hardware solutions / Other hardware appliances

Vendor: