CVE-2021-33045

Dahua IP Camera Authentication Bypass Vulnerability

Dahua — IP Camera Firmware

Added to KEV catalog: 21 August 2024
Federal remediation due date: 11 September 2024
Weakness classification (CWE): CWE-287

CISA Description

Dahua IP cameras and related products contain an authentication bypass vulnerability when the loopback device is specified by the client during authentication.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://www.dahuasecurity.com/aboutUs/trustedCenter/details/582; https://nvd.nist.gov/vuln/detail/CVE-2021-33045

View on NVD View on MITRE CVE View full CISA catalog

More Dahua Vulnerabilities

CVE-2021-33044

Dahua IP Camera Authentication Bypass Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services