Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior
Críticas / altas1389▼ 28 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.8) | 0.45% | — | Dahuasecurity Ipc-hfw1xxx FirmwareDahuasecurity Ipc-hdw1xxx FirmwareDahuasecurity Ipc-hfw2xxx Firmware | 12/6/2019 | 17/6/2026 | Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11. The vulnerability exits in the function of redirection display for serial port printing information, which can not be used by product basic functions. After an attacker logs in locally, this… | |
| Modificada | Crítica (9.8) | 1.4% | — | Dahuasecurity Ipc-hfw1xxx FirmwareDahuasecurity Ipc-hdw1xxx FirmwareDahuasecurity Ipc-hdbw1xxx FirmwareDahuasecurity Ipc-hfw2xxx Firmware+21 | 28/11/2017 | 17/6/2026 | Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker. | |
| Modificada | Alta (7.3) | 37% | — | Dahuasecurity Dh-ipc-hdbw23a0rn-zs FirmwareDahuasecurity Dh-ipc-hdbw13a0sn FirmwareDahuasecurity Dh-ipc-hdw1xxx FirmwareDahuasecurity Dh-ipc-hdw2xxx Firmware+11 | 6/5/2017 | 17/6/2026 | A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3,… | |
| Modificada | Crítica (9.8) | 51% | 💥 Exploit | Dahuasecurity Dh-ipc-hdbw23a0rn-zs FirmwareDahuasecurity Dh-ipc-hdbw13a0sn FirmwareDahuasecurity Dh-ipc-hdw1xxx FirmwareDahuasecurity Dh-ipc-hdw2xxx Firmware+11 | 6/5/2017 | 17/6/2026 | A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices.… |