CVE Feed

    Dashboard / CVE / CVE-2021-33046

    CVE-2021-33046

    Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.

    Published:Jan 13, 2022
    Last Modified:Nov 21, 2024
    EPS:Jan 13, 2022
    EPSS Score:0.00502
    CVSS Score:9.8

    Affected Products

    Vendor
    Dahuasecurity
    Product
    Asc2204c
    Vendor
    Dahuasecurity
    Product
    Asc2204c Firmware
    Vendor
    Dahuasecurity
    Product
    Hcvr7xxx
    Vendor
    Dahuasecurity
    Product
    Hcvr7xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Hcvr8xxx
    Vendor
    Dahuasecurity
    Product
    Hcvr8xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hx1xxx
    Vendor
    Dahuasecurity
    Product
    Ipc-hx1xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hx2xxx
    Vendor
    Dahuasecurity
    Product
    Ipc-hx2xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hx3xxx
    Vendor
    Dahuasecurity
    Product
    Ipc-hx3xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hx5\(4\)\(3\)xxx
    Vendor
    Dahuasecurity
    Product
    Ipc-hx5\(4\)\(3\)xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hx5xxx
    Vendor
    Dahuasecurity
    Product
    Ipc-hx5xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Nvr1xxx
    Vendor
    Dahuasecurity
    Product
    Nvr1xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Nvr2xxx
    Vendor
    Dahuasecurity
    Product
    Nvr2xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Nvr4xxx
    Vendor
    Dahuasecurity
    Product
    Nvr4xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Nvr5xxx
    Vendor
    Dahuasecurity
    Product
    Nvr5xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Sd1a1
    Vendor
    Dahuasecurity
    Product
    Sd1a1 Firmware
    Vendor
    Dahuasecurity
    Product
    Sd22
    Vendor
    Dahuasecurity
    Product
    Sd22 Firmware
    Vendor
    Dahuasecurity
    Product
    Sd49
    Vendor
    Dahuasecurity
    Product
    Sd49 Firmware
    Vendor
    Dahuasecurity
    Product
    Sd50
    Vendor
    Dahuasecurity
    Product
    Sd50 Firmware
    Vendor
    Dahuasecurity
    Product
    Sd52c
    Vendor
    Dahuasecurity
    Product
    Sd52c Firmware
    Vendor
    Dahuasecurity
    Product
    Sd6al
    Vendor
    Dahuasecurity
    Product
    Sd6al Firmware
    Vendor
    Dahuasecurity
    Product
    Tpc-bf1241
    Vendor
    Dahuasecurity
    Product
    Tpc-bf1241 Firmware
    Vendor
    Dahuasecurity
    Product
    Tpc-bf2221
    Vendor
    Dahuasecurity
    Product
    Tpc-bf2221 Firmware
    Vendor
    Dahuasecurity
    Product
    Tpc-bf5x01
    Vendor
    Dahuasecurity
    Product
    Tpc-bf5x01 Firmware
    Vendor
    Dahuasecurity
    Product
    Tpc-pt8x21x
    Vendor
    Dahuasecurity
    Product
    Tpc-pt8x21x Firmware
    Vendor
    Dahuasecurity
    Product
    Tpc-sd2221
    Vendor
    Dahuasecurity
    Product
    Tpc-sd2221 Firmware
    Vendor
    Dahuasecurity
    Product
    Tpc-sd8x21
    Vendor
    Dahuasecurity
    Product
    Tpc-sd8x21 Firmware
    Vendor
    Dahuasecurity
    Product
    Vtox20xf
    Vendor
    Dahuasecurity
    Product
    Vtox20xf Firmware
    Vendor
    Dahuasecurity
    Product
    Xvr4xxx
    Vendor
    Dahuasecurity
    Product
    Xvr4xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Xvr5xxx
    Vendor
    Dahuasecurity
    Product
    Xvr5xxx Firmware
    Vendor
    Dahuasecurity
    Product
    Xvr7xxx
    Vendor
    Dahuasecurity
    Product
    Xvr7xxx Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High