8.1

CVE-2019-9682

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dahuasecurity ≫ Sd6al Firmware Version < 2019-12
   Dahuasecurity ≫ Sd6al Version -
Dahuasecurity ≫ Sd5a Firmware Version < 2019-12
   Dahuasecurity ≫ Sd5a Version -
Dahuasecurity ≫ Sd1a Firmware Version < 2019-12
   Dahuasecurity ≫ Sd1a Version -
Dahuasecurity ≫ Ptz1a Firmware Version < 2019-12
   Dahuasecurity ≫ Ptz1a Version -
Dahuasecurity ≫ Sd50 Firmware Version < 2019-12
   Dahuasecurity ≫ Sd50 Version -
Dahuasecurity ≫ Sd52c Firmware Version < 2019-12
   Dahuasecurity ≫ Sd52c Version -
Dahuasecurity ≫ Ipc-hx5842h Firmware Version < 2019-12
   Dahuasecurity ≫ Ipc-hx5842h Version -
Dahuasecurity ≫ Ipc-hx7842h Firmware Version < 2019-12
   Dahuasecurity ≫ Ipc-hx7842h Version -
Dahuasecurity ≫ Ipc-hx2xxx Firmware Version < 2019-12
   Dahuasecurity ≫ Ipc-hx2xxx Version -
Dahuasecurity ≫ Ipc-hxxx5x4x Firmware Version < 2019-12
   Dahuasecurity ≫ Ipc-hxxx5x4x Version -
Dahuasecurity ≫ N42b1p Firmware Version < 2019-12
   Dahuasecurity ≫ N42b1p Version -
Dahuasecurity ≫ N42b2p Firmware Version < 2019-12
   Dahuasecurity ≫ N42b2p Version -
Dahuasecurity ≫ N42b3p Firmware Version < 2019-12
   Dahuasecurity ≫ N42b3p Version -
Dahuasecurity ≫ N52a4p Firmware Version < 2019-12
   Dahuasecurity ≫ N52a4p Version -
Dahuasecurity ≫ N54a4p Firmware Version < 2019-12
   Dahuasecurity ≫ N54a4p Version -
Dahuasecurity ≫ N52b2p Firmware Version < 2019-12
   Dahuasecurity ≫ N52b2p Version -
Dahuasecurity ≫ N52b5p Firmware Version < 2019-12
   Dahuasecurity ≫ N52b5p Version -
Dahuasecurity ≫ N52b3p Firmware Version < 2019-12
   Dahuasecurity ≫ N52b3p Version -
Dahuasecurity ≫ N54b2p Firmware Version < 2019-12
   Dahuasecurity ≫ N54b2p Version -
Dahuasecurity ≫ Ipc-hdbw1320e-w Firmware Version < 2019-12
   Dahuasecurity ≫ Ipc-hdbw1320e-w Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.86% 0.537
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.1 2.2 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

https://www.dahuasecurity.com/support/cybersecurity/details/767
Vendor Advisory