« Volver al listado

Dahuasecurity

Dahuasecurity Ipc-hx3xxx Firmware: vulnerabilidades y CVE

Dahuasecurity Ipc-hx3xxx Firmware tiene 3 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 2 figuran en el catálogo de explotación activa de CISA.

CVE3
Últimos 12 meses0
Críticas3
Explotadas activamente2

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

🔴 Explotadas activamente (CISA KEV)

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2021-33044Crítica (9.8)100%⚠ Explotación activa15 sept 2021
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
CVE-2021-33045Crítica (9.8)100%⚠ Explotación activa15 sept 2021
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2021-33046Crítica (9.8)1.3%—13 ene 2022
Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.
CVE-2021-33045Crítica (9.8)100%⚠ Explotación activa15 sept 2021
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
CVE-2021-33044Crítica (9.8)100%⚠ Explotación activa15 sept 2021
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1078 Valid Accounts2
  2. T1190 Exploit Public-Facing Application2

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de Dahuasecurity