CyberSec.Space Logo
Back to CVE Browser

CVE-2021-33044

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score81.1750%
EPSS Percentile90.83th
Published2021-09-15
Last Modified2026-01-13
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

Affected Platforms (CPE)

💻
Dahuasecurity

Ipc Hum7xxx Firmware

< 2.820.0000000.5.r.210705
💻
Dahuasecurity

Ipc Hx3xxx Firmware

< 2.800.0000000.29.r.210630
💻
Dahuasecurity

Ipc Hx5xxx Firmware

< 2.820.0000000.18.r.210705
💻
Dahuasecurity

Sd1a1 Firmware

< 2.812.0000007.0.r.210706

References & Advisories

🔗 http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html
🔗 http://seclists.org/fulldisclosure/2021/Oct/13
🔗 https://www.dahuasecurity.com/support/cybersecurity/details/957
🔗 http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html
🔗 http://seclists.org/fulldisclosure/2021/Oct/13
🔗 https://www.dahuasecurity.com/support/cybersecurity/details/957
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-33044

Related Vulnerabilities

CVE-2026-167718.8

In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-b...

CVE-2026-120015.2

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, Archer C20 v6...

CVE-2026-658937.0

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with ...

CVE-2026-645208.4

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The ...