CVE Feed

    Dashboard / CVE / CVE-2021-33044

    CVE-2021-33044

    The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

    Published:Sep 15, 2021
    Last Modified:Jan 13, 2026
    EPS:Sep 15, 2021
    EPSS Score:0.94269
    CVSS Score:9.8

    CISA Notification

    Description

    The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

    Required Action:

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Notes:

    No extra notes provided.

    Due Date
    Sep 11, 2024
    730 days ago
    Alert Date
    Aug 21, 2024
    751 days ago

    Affected Products

    Vendor
    Dahuasecurity
    Product
    Ipc-hum7xxx
    Vendor
    Dahuasecurity
    Product
    Ipc-hum7xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hx3xxx
    Vendor
    Dahuasecurity
    Product
    Ipc-hx3xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hx5xxx
    Vendor
    Dahuasecurity
    Product
    Ipc-hx5xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Sd1a1
    Vendor
    Dahuasecurity
    Product
    Sd1a1 Firmware
    Vendor
    Dahuasecurity
    Product
    Sd22
    Vendor
    Dahuasecurity
    Product
    Sd22 Firmware
    Vendor
    Dahuasecurity
    Product
    Sd49
    Vendor
    Dahuasecurity
    Product
    Sd49 Firmware
    Vendor
    Dahuasecurity
    Product
    Sd50
    Vendor
    Dahuasecurity
    Product
    Sd50 Firmware
    Vendor
    Dahuasecurity
    Product
    Sd52c
    Vendor
    Dahuasecurity
    Product
    Sd52c Firmware
    Vendor
    Dahuasecurity
    Product
    Sd6al
    Vendor
    Dahuasecurity
    Product
    Sd6al Firmware
    Vendor
    Dahuasecurity
    Product
    Tpc-bf1241
    Vendor
    Dahuasecurity
    Product
    Tpc-bf1241 Firmware
    Vendor
    Dahuasecurity
    Product
    Tpc-bf2221
    Vendor
    Dahuasecurity
    Product
    Tpc-bf2221 Firmware
    Vendor
    Dahuasecurity
    Product
    Tpc-bf5x01
    Vendor
    Dahuasecurity
    Product
    Tpc-bf5x01 Firmware
    Vendor
    Dahuasecurity
    Product
    Tpc-bf5x21
    Vendor
    Dahuasecurity
    Product
    Tpc-bf5x21 Firmware
    Vendor
    Dahuasecurity
    Product
    Tpc-pt8x21b
    Vendor
    Dahuasecurity
    Product
    Tpc-pt8x21b Firmware
    Vendor
    Dahuasecurity
    Product
    Tpc-sd2221
    Vendor
    Dahuasecurity
    Product
    Tpc-sd2221 Firmware
    Vendor
    Dahuasecurity
    Product
    Tpc-sd8x21
    Vendor
    Dahuasecurity
    Product
    Tpc-sd8x21 Firmware
    Vendor
    Dahuasecurity
    Product
    Vth-542xh
    Vendor
    Dahuasecurity
    Product
    Vth-542xh Firmware
    Vendor
    Dahuasecurity
    Product
    Vto-65xxx
    Vendor
    Dahuasecurity
    Product
    Vto-65xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Vto-75x95x
    Vendor
    Dahuasecurity
    Product
    Vto-75x95x Firmware

    Exploits

    http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.htmlhttp://seclists.org/fulldisclosure/2021/Oct/13http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.htmlhttp://seclists.org/fulldisclosure/2021/Oct/13https://github.com/Alonzozzz/alonzzzohttps://github.com/Baza-NATO/CVE-2021-33044https://github.com/bp2008/DahuaLoginBypasshttps://github.com/eagle-nett/DAHUA_AUTH-BYPASS-CVE-2021-33044https://github.com/haingn/LoHongCam-CVE-2021-33044https://github.com/litndat/Camera-Dahua-Research-l-h-ng-CVE-2021-33044https://github.com/Spy0x7/CVE-2021-33044https://github.com/umair-aziz025/dahua-cve-research

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High