« Back to list

Dahuasecurity

Dahuasecurity Tpc-bf5x01 Firmware: vulnerabilities and CVEs

Dahuasecurity Tpc-bf5x01 Firmware has 2 published vulnerabilities, 0 of them in the last 12 months. 2 are rated critical and 1 are listed by CISA as actively exploited.

CVEs2
Last 12 months0
Critical2
Actively exploited1

All vulnerabilities in the catalogue →⭐ Follow this technology

🔴 Actively exploited (CISA KEV)

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2021-33044Critical (9.8)100%⚠ Active exploitationSep 15, 2021
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2021-33046Critical (9.8)1.3%—Jan 13, 2022
Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.
CVE-2021-33044Critical (9.8)100%⚠ Active exploitationSep 15, 2021
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

🎯 How it gets exploited (ATT&CK techniques)

  1. T1078 Valid Accounts1
  2. T1190 Exploit Public-Facing Application1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by Dahuasecurity