#VU96446 Improper Authentication in Dahua Technology products - CVE-2021-33044

Vulnerability identifier: #VU96446

Vulnerability risk: Critical

CVSSv4.0: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Red]

CVE-ID: CVE-2021-33044

CWE-ID: CWE-287

Exploitation vector: Network

Exploit availability: Yes

Vulnerable software:
Dahua IPC-HX1XXX
Hardware solutions / Other hardware appliances
Dahua IPC-HX2XXX
Hardware solutions / Other hardware appliances
Dahua IPC-HX3XXX
Hardware solutions / Other hardware appliances
Dahua IPC-HX5(4)(3)XXX
Hardware solutions / Other hardware appliances
Dahua IPC-HX5XXX
Hardware solutions / Other hardware appliances
Dahua IPC-HUM7XXX
Hardware solutions / Other hardware appliances
Dahua IPC-HX8XXX
Hardware solutions / Other hardware appliances
Dahua VTO75X95X
Hardware solutions / Other hardware appliances
Dahua VTO65XXX
Hardware solutions / Other hardware appliances
Dahua DHI-ASI7213Y-V3-T1
Hardware solutions / Other hardware appliances
Dahua VTH542XH
Hardware solutions / Other hardware appliances
Dahua SD1A1
Hardware solutions / Other hardware appliances
Dahua SD22
Hardware solutions / Other hardware appliances
Dahua SD49
Hardware solutions / Other hardware appliances
Dahua SD50
Hardware solutions / Other hardware appliances
Dahua SD52C
Hardware solutions / Other hardware appliances
Dahua SD6AL
Hardware solutions / Other hardware appliances
Dahua TPC-BF1241
Hardware solutions / Other hardware appliances
Dahua TPC-BF2221
Hardware solutions / Other hardware appliances
Dahua TPC-SD2221
Hardware solutions / Other hardware appliances
Dahua TPC-BF5X01
Hardware solutions / Other hardware appliances
Dahua TPC-BF5X21
Hardware solutions / Other hardware appliances
Dahua TPC-SD8X21
Hardware solutions / Other hardware appliances
Dahua TPC-PT8X21B
Hardware solutions / Other hardware appliances

Vendor: Dahua Technology

Description

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error when processing authentication requests. A remote attacker can bypass authentication process and gain unauthorized access to the device.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Dahua IPC-HX1XXX: before 2.820.0000000.33.R.210705

Dahua IPC-HX2XXX: before 2.820.0000000.33.R.210705

Dahua IPC-HX3XXX: before 2.800.0000000.29.R.210630

Dahua IPC-HX5(4)(3)XXX: before 2.800.0000000.29.R.210630

Dahua IPC-HX5XXX: before 2.820.0000000.5.R.210705

Dahua IPC-HUM7XXX: before 2.820.0000000.5.R.210705

Dahua IPC-HX8XXX: before 2.800.0000000.14.R.210720

Dahua VTO75X95X: before 4.300.0000003.0.R.210714

Dahua VTO65XXX: before 4.300.0000004.0.R.210715

Dahua DHI-ASI7213Y-V3-T1: before 1.000.0000014.0.R.210823

Dahua VTH542XH: before 4.500.0000002.0.R.210715

Dahua SD1A1: before 2.812.0000007.0.R.210706

Dahua SD22: before 2.812.0000007.0.R.210706

Dahua SD49: before 2.812.0000007.0.R.210706

Dahua SD50: before 2.812.0000007.0.R.210706

Dahua SD52C: before 2.812.0000007.0.R.210706

Dahua SD6AL: before 2.812.0000007.0.R.210706

Dahua TPC-BF1241: before 2.630.0000000.6.R.210707

Dahua TPC-BF2221: before 2.630.0000000.10.R.210707

Dahua TPC-SD2221: before 2.630.0000000.7.R.210707

Dahua TPC-BF5X01: before 2.630.0000000.12.R.210707

Dahua TPC-BF5X21: before 2.630.0000000.8.R.210630

Dahua TPC-SD8X21: before 2.630.0000000.9.R.210706

Dahua TPC-PT8X21B: before 2.630.0000000.10.R.210701

---

External links
https://www.dahuasecurity.com/aboutUs/trustedCenter/details/582
https://seclists.org/fulldisclosure/2021/Oct/13
https://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

Yes. This vulnerability is being exploited in the wild.