9.8

CVE-2020-9502

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dahuasecurity ≫ Sd6al Firmware Version < 2019-12
   Dahuasecurity ≫ Sd6al Version -
Dahuasecurity ≫ Sd5a Firmware Version < 2019-12
   Dahuasecurity ≫ Sd5a Version -
Dahuasecurity ≫ Sd1a Firmware Version < 2019-12
   Dahuasecurity ≫ Sd1a Version -
Dahuasecurity ≫ Ptz1a Firmware Version < 2019-12
   Dahuasecurity ≫ Ptz1a Version -
Dahuasecurity ≫ Sd50 Firmware Version < 2019-12
   Dahuasecurity ≫ Sd50 Version -
Dahuasecurity ≫ Sd52c Firmware Version < 2019-12
   Dahuasecurity ≫ Sd52c Version -
Dahuasecurity ≫ Ipc-hx5842h Firmware Version < 2019-12
   Dahuasecurity ≫ Ipc-hx5842h Version -
Dahuasecurity ≫ Ipc-hx7842h Firmware Version < 2019-12
   Dahuasecurity ≫ Ipc-hx7842h Version -
Dahuasecurity ≫ Ipc-hx2xxx Firmware Version < 2019-12
   Dahuasecurity ≫ Ipc-hx2xxx Version -
Dahuasecurity ≫ Ipc-hxxx5x4x Firmware Version < 2019-12
   Dahuasecurity ≫ Ipc-hxxx5x4x Version -
Dahuasecurity ≫ N42b1p Firmware Version < 2019-12
   Dahuasecurity ≫ N42b1p Version -
Dahuasecurity ≫ N42b2p Firmware Version < 2019-12
   Dahuasecurity ≫ N42b2p Version -
Dahuasecurity ≫ N42b3p Firmware Version < 2019-12
   Dahuasecurity ≫ N42b3p Version -
Dahuasecurity ≫ N52a4p Firmware Version < 2019-12
   Dahuasecurity ≫ N52a4p Version -
Dahuasecurity ≫ N54a4p Firmware Version < 2019-12
   Dahuasecurity ≫ N54a4p Version -
Dahuasecurity ≫ N52b2p Firmware Version < 2019-12
   Dahuasecurity ≫ N52b2p Version -
Dahuasecurity ≫ N52b5p Firmware Version < 2019-12
   Dahuasecurity ≫ N52b5p Version -
Dahuasecurity ≫ N52b3p Firmware Version < 2019-12
   Dahuasecurity ≫ N52b3p Version -
Dahuasecurity ≫ N54b2p Firmware Version < 2019-12
   Dahuasecurity ≫ N54b2p Version -
Dahuasecurity ≫ Ipc-hdbw1320e-w Firmware Version < 2019-12
   Dahuasecurity ≫ Ipc-hdbw1320e-w Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.49% 0.716
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-330 Use of Insufficiently Random Values

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

https://www.dahuasecurity.com/support/cybersecurity/details/777
Vendor Advisory