CVE-2021-33045

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score54.8410%

EPSS Percentile86.85th

Published2021-09-15

Last Modified2026-01-13

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

Affected Platforms (CPE)

💻

Dahuasecurity

Ipc Hum7xxx Firmware

< 2.820.0000000.5.r.210705

💻

Dahuasecurity

Ipc Hx3xxx Firmware

< 2.800.0000000.29.r.210630

💻

Dahuasecurity

Ipc Hx5xxx Firmware

< 2.820.0000000.5.r.210705

💻

Dahuasecurity

Nvr 1xxx Firmware

< 4.001.0000005.1.r.210709

References & Advisories

🔗 http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html

🔗 http://seclists.org/fulldisclosure/2021/Oct/13

🔗 https://www.dahuasecurity.com/support/cybersecurity/details/957

🔗 http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html

🔗 http://seclists.org/fulldisclosure/2021/Oct/13

🔗 https://www.dahuasecurity.com/support/cybersecurity/details/957

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-33045

Vulnerability Description

Affected Platforms (CPE)

Ipc Hum7xxx Firmware

Ipc Hx3xxx Firmware

Ipc Hx5xxx Firmware

Nvr 1xxx Firmware

References & Advisories

相关漏洞威胁