CVE-2021-33044
Dahua IP Camera Authentication Bypass Vulnerability
CVSS
—
Sem CVSS
EPSS
100.0%
p100
KEV
SIM
21 de ago. de 2024
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
Dahua / IP Camera Firmware
Vulnerabilidade
Dahua IP Camera Authentication Bypass Vulnerability
Adicionado ao KEV
21 de ago. de 2024
Corrigir até
11 de set. de 2024
Uso conhecido em ransomware
Não
Descrição resumida
Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the client during authentication.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://www.dahuasecurity.com/aboutUs/trustedCenter/details/582; https://nvd.nist.gov/vuln/detail/CVE-2021-33044