Improper Authentication in Dahua Technology products - CVE-2021-33045

Vulnerability identifier: #VU96447

CSH Severity: Critical

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-33045

CWE-ID: CWE-287

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error when processing authentication requests. A remote attacker can bypass authentication process and gain unauthorized access to the device.

Dahua IPC-HX8XXX
Dahua IPC-HX3XXX
Dahua IPC-HX5(4)(3)XXX
Dahua IPC-HX5XXX
Dahua IPC-HUM7XXX
Dahua IPC-HX2XXX
Dahua IPC-HX1XXX
Dahua NVR5XXX
Dahua NVR2XXX
Dahua NVR4XXX
Dahua XVR5x08
Dahua XVR7x16
Dahua XVR5x16
Dahua XVR4x04
Dahua XVR5x04
Dahua XVR4x08
Dahua NVR4x
Dahua NVR6XX
Dahua XVR7x32
Dahua NVR1XXX
Dahua VTO75X95X
Dahua VTO65XXX
Dahua VTH542XH

Install updates from vendor's website.

Dahua IPC-HX8XXX - addressed in versions 2.800.0000000.14.R.210712, 2.800.0000000.14.R.210720, 3.000.0000000.2.R.210712
Dahua IPC-HX3XXX - addressed in versions 2.800.0000000.29.R.210630, 2.820.0000000.18.R.210705
Dahua IPC-HX5(4)(3)XXX - update to 2.800.0000000.29.R.210630
Dahua IPC-HX5XXX - update to 2.820.0000000.5.R.210705
Dahua IPC-HUM7XXX - update to 2.820.0000000.5.R.210705
Dahua IPC-HX2XXX - update to 2.820.0000000.33.R.210705
Dahua IPC-HX1XXX - update to 2.820.0000000.33.R.210705
Dahua NVR5XXX - addressed in versions 4.001.0000000.0.R.210710, 4.001.0000000.3.R.210710, 4.001.0000006.1.R.210709
Dahua NVR2XXX - addressed in versions 4.001.0000000.1.R.210710, 4.001.0000003.1.R.210709, 4.001.0000005.0.R.210709, 4.002.0000000.0.R.210709
Dahua NVR4XXX - addressed in versions 4.001.0000000.3.R.210710, 4.001.0000005.1.R.210713
Dahua XVR5x08 - addressed in versions 4.001.0000000.9.R.210710, 4.001.0000000.15.R.210702, 4.001.0000003.1.R.210710
Dahua XVR7x16 - addressed in versions 4.001.0000000.9.R.210710, 4.001.0000003.1.R.210710
Dahua XVR5x16 - addressed in versions 4.001.0000000.9.R.210710, 4.001.0000003.1.R.210710
Dahua XVR4x04 - addressed in versions 4.001.0000000.14.R.210709, 4.001.0000001.1.R.210709
Dahua XVR5x04 - addressed in versions 4.001.0000000.14.R.210709, 4.001.0000000.15.R.210702, 4.001.0000003.1.R.210710
Dahua XVR4x08 - addressed in versions 4.001.0000000.15.R.210702, 4.001.0000001.1.R.210709
Dahua NVR4x - update to 4.001.0000001.0.R.210709
Dahua NVR6XX - update to 4.001.0000001.1.R.210716
Dahua XVR7x32 - update to 4.001.0000003.1.R.210710
Dahua NVR1XXX - update to 4.001.0000005.1.R.210709
Dahua VTO75X95X - update to 4.300.0000003.0.R.210714
Dahua VTO65XXX - update to 4.300.0000004.0.R.210715
Dahua VTH542XH - update to 4.500.0000002.0.R.210715

• Exploit #10423 - DahuaLoginBypass (Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.) (August 23, 2024)

• https://www.dahuasecurity.com/aboutUs/trustedCenter/details/582
• http://seclists.org/fulldisclosure/2021/Oct/13
• http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html

• Authentication bypass in multiple Dahua products