CVE-2021-33044
Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
Affected Platforms (CPE)
💻
Dahuasecurity
Ipc Hum7xxx Firmware
< 2.820.0000000.5.r.210705💻
Dahuasecurity
Ipc Hx3xxx Firmware
< 2.800.0000000.29.r.210630💻
Dahuasecurity
Ipc Hx5xxx Firmware
< 2.820.0000000.18.r.210705💻
Dahuasecurity
Sd1a1 Firmware
< 2.812.0000007.0.r.210706💻
Dahuasecurity
Sd22 Firmware
< 2.812.0000007.0.r.210706💻
Dahuasecurity
Sd49 Firmware
< 2.812.0000007.0.r.210706💻
Dahuasecurity
Sd50 Firmware
< 2.812.0000007.0.r.210706💻
Dahuasecurity
Sd52c Firmware
< 2.812.0000007.0.r.210706💻
Dahuasecurity
Sd6al Firmware
< 2.812.0000007.0.r.210706💻
Dahuasecurity
Tpc Bf1241 Firmware
< 2.630.0000000.6.r.210707💻
Dahuasecurity
Tpc Bf2221 Firmware
< 2.630.0000000.10.r.210707💻
Dahuasecurity
Tpc Bf5x01 Firmware
< 2.630.0000000.12.r.210707💻
Dahuasecurity
Tpc Pt8x21b Firmware
< 2.630.0000000.10.r.210701💻
Dahuasecurity
Tpc Sd2221 Firmware
<= 2.630.0000000.7.r.210707💻
Dahuasecurity
Tpc Sd8x21 Firmware
< 2.630.0000000.9.r.210706💻
Dahuasecurity
Vto 65xxx Firmware
< 4.300.0000004.0.r.210715💻
Dahuasecurity
Vto 75x95x Firmware
< 4.300.0000003.0.r.210714💻
Dahuasecurity
Vth 542xh Firmware
< 4.500.0000002.0.r.210715💻
Dahuasecurity