CVE Feed

    Dashboard / CVE / CVE-2021-33045

    CVE-2021-33045

    The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

    Published:Sep 15, 2021
    Last Modified:Jan 13, 2026
    EPS:Sep 15, 2021
    EPSS Score:0.94171
    CVSS Score:9.8

    CISA Notification

    Description

    The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

    Required Action:

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

    Notes:

    No extra notes provided.

    Due Date
    Sep 11, 2024
    730 days ago
    Alert Date
    Aug 21, 2024
    751 days ago

    Affected Products

    Vendor
    Dahuasecurity
    Product
    Ipc-hum7xxx
    Vendor
    Dahuasecurity
    Product
    Ipc-hum7xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hx3xxx
    Vendor
    Dahuasecurity
    Product
    Ipc-hx3xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hx5xxx
    Vendor
    Dahuasecurity
    Product
    Ipc-hx5xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Nvr-1xxx
    Vendor
    Dahuasecurity
    Product
    Nvr-1xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Nvr-2xxx
    Vendor
    Dahuasecurity
    Product
    Nvr-2xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Nvr-4xxx
    Vendor
    Dahuasecurity
    Product
    Nvr-4xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Nvr-5xxx
    Vendor
    Dahuasecurity
    Product
    Nvr-5xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Nvr-6xx
    Vendor
    Dahuasecurity
    Product
    Nvr-6xx Firmware
    Vendor
    Dahuasecurity
    Product
    Vth-542xh
    Vendor
    Dahuasecurity
    Product
    Vth-542xh Firmware
    Vendor
    Dahuasecurity
    Product
    Vto-65xxx
    Vendor
    Dahuasecurity
    Product
    Vto-65xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Vto-75x95x
    Vendor
    Dahuasecurity
    Product
    Vto-75x95x Firmware
    Vendor
    Dahuasecurity
    Product
    Xvr-4x04
    Vendor
    Dahuasecurity
    Product
    Xvr-4x04 Firmware
    Vendor
    Dahuasecurity
    Product
    Xvr-4x08
    Vendor
    Dahuasecurity
    Product
    Xvr-4x08 Firmware
    Vendor
    Dahuasecurity
    Product
    Xvr-5x04
    Vendor
    Dahuasecurity
    Product
    Xvr-5x04 Firmware
    Vendor
    Dahuasecurity
    Product
    Xvr-5x08
    Vendor
    Dahuasecurity
    Product
    Xvr-5x08 Firmware
    Vendor
    Dahuasecurity
    Product
    Xvr-5x16
    Vendor
    Dahuasecurity
    Product
    Xvr-5x16 Firmware
    Vendor
    Dahuasecurity
    Product
    Xvr-7x16
    Vendor
    Dahuasecurity
    Product
    Xvr-7x16 Firmware
    Vendor
    Dahuasecurity
    Product
    Xvr-7x32
    Vendor
    Dahuasecurity
    Product
    Xvr-7x32 Firmware

    Exploits

    http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.htmlhttp://seclists.org/fulldisclosure/2021/Oct/13http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.htmlhttp://seclists.org/fulldisclosure/2021/Oct/13https://github.com/dongpohezui/cve-2021-33045https://github.com/lequoca/Camera-Dahua-CVE-2021-33045

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High