Description
Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Access control vulnerability found in some Dahua products | Dahua IP Camera devices IPC-HX3XXX, and IPC-HX5XXX, PTZ Dome Camera SD1A1, SD22, SD49, SD50, SD52C, and SD6AL, Thermal TPC-BF1241,TPC-BF2221, TPC-SD2221, VTO2101E, VTOX221E, and ASC2204C devices Buildtime between 2017/7 ~ 2021/7. NVR devices NVR4XXX, and NVR5XXX, XVR devices XVR4XXX, and XVR5XXX, H… | — |