3 results (0.009 seconds)

CVSS: 10.0EPSS: 0%CPEs: 71EXPL: 0

31 Jul 2024 — A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization. • https://www.dahuasecurity.com/aboutUs/trustedCenter/details/768 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 71EXPL: 0

31 Jul 2024 — A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. • https://www.dahuasecurity.com/aboutUs/trustedCenter/details/768 • CWE-20: Improper Input Validation •

CVSS: 9.8EPSS: 0%CPEs: 50EXPL: 0

28 Nov 2017 — Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker. >Los clientes de las cámaras Dahua IP o IP PTZ podrían enviar información relevante del dispositivo para recibir una contraseña temporal limitada temporalmente por un distribuidor autorizado de Dahua para resta... • http://www.dahuasecurity.com/annoucementsingle/security-advisory--admin-password-recovery-mechanism-in-some-dahua-ip-camera-and-ip-ptz-could-lead-to-security-risk_14731_221.html •