Описание
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2021-33045
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-33045
- https://www.dahuasecurity.com/support/cybersecurity/details/957
- http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html
- http://seclists.org/fulldisclosure/2021/Oct/13
Связанные уязвимости
CVSS3: 9.8
nvd
около 5 лет назад
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
CVSS3: 9.8
fstec
больше 5 лет назад
Уязвимость механизма аутентификации Loopback микропрограммного обеспечения устройств Dahua, позволяющая нарушителю повысить свои привилегии