Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

dahuasecurity ipc-hdw1x2x firmware vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3

CVE-2019-9678

Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X...
Dahuasecurity Ipc-hdw1x2x FirmwareDahuasecurity Ipc-hfw1x2x FirmwareDahuasecurity Ipc-hdw2x2x FirmwareDahuasecurity Ipc-hfw2x2x FirmwareDahuasecurity Ipc-hdw4x2x FirmwareDahuasecurity Ipc-hfw4x2x FirmwareDahuasecurity Ipc-hdbw4x2x FirmwareDahuasecurity Ipc-hdw5x2x FirmwareDahuasecurity Ipc-hfw5x2x Firmware
8.8
CVSSv3

CVE-2019-9679

Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for ve...
Dahuasecurity Ipc-hdw1x2x FirmwareDahuasecurity Ipc-hfw1x2x FirmwareDahuasecurity Ipc-hdw2x2x FirmwareDahuasecurity Ipc-hfw2x2x FirmwareDahuasecurity Ipc-hdw4x2x FirmwareDahuasecurity Ipc-hfw4x2x FirmwareDahuasecurity Ipc-hdbw4x2x FirmwareDahuasecurity Ipc-hdw5x2x FirmwareDahuasecurity Ipc-hfw5x2x Firmware
5.3
CVSSv3

CVE-2019-9680

Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4...
Dahuasecurity Ipc-hdw1x2x FirmwareDahuasecurity Ipc-hfw1x2x FirmwareDahuasecurity Ipc-hdw2x2x FirmwareDahuasecurity Ipc-hfw2x2x FirmwareDahuasecurity Ipc-hdw4x2x FirmwareDahuasecurity Ipc-hfw4x2x FirmwareDahuasecurity Ipc-hdbw4x2x FirmwareDahuasecurity Ipc-hdw5x2x FirmwareDahuasecurity Ipc-hfw5x2x Firmware
9.8
CVSSv3

CVE-2019-9677

The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HD...
Dahuasecurity Ipc-hdw1x2x FirmwareDahuasecurity Ipc-hfw1x2x FirmwareDahuasecurity Ipc-hdw2x2x FirmwareDahuasecurity Ipc-hfw2x2x FirmwareDahuasecurity Ipc-hdw4x2x FirmwareDahuasecurity Ipc-hfw4x2x FirmwareDahuasecurity Ipc-hdbw4x2x FirmwareDahuasecurity Ipc-hdw5x2x FirmwareDahuasecurity Ipc-hfw5x2x Firmware
5.3
CVSSv3

CVE-2019-9681

Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-...
Dahuasecurity Ipc-hdw1x2x FirmwareDahuasecurity Ipc-hfw1x2x FirmwareDahuasecurity Ipc-hdw2x2x FirmwareDahuasecurity Ipc-hfw2x2x FirmwareDahuasecurity Ipc-hdw4x2x FirmwareDahuasecurity Ipc-hfw4x2x FirmwareDahuasecurity Ipc-hdbw4x2x FirmwareDahuasecurity Ipc-hdw5x2x FirmwareDahuasecurity Ipc-hfw5x2x Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SSRFserver-side request forgeryCVE-2024-30067CVE-2024-5553CVE-2024-30095IDORCVE-2024-35252CVE-2024-23692CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook