CVE-2019-9679
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.
Algunas de las funciones de Depuración de Dahua no poseen separación de permisos. Usuarios poco privilegiados pueden usar la función de Depuración después de iniciar sesión. Los productos afectados incluyen: IPC-HDW1X2X, IPC-HFW1X2X, IPC-HDW2X2X, IPC-HFW2X2X, IPC-HDW4X2X, IPC-HFW4X2X, IPC-HDBW4X2X, IPC-HDBW4X2X, IPC-HDBW4X2X, IPC-HDBW4X2X -HFW5X2X, para versiones cuyo tiempo de Compilación es antes del 18 de agosto de 2019.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-03-11 CVE Reserved
- 2019-09-18 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-276: Incorrect Default Permissions
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.dahuasecurity.com/support/cybersecurity/details/637 | 2019-09-19 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw1x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdw1x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdw1x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw1x2x Search vendor "Dahuasecurity" for product "Ipc-hdw1x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw1x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hfw1x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hfw1x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw1x2x Search vendor "Dahuasecurity" for product "Ipc-hfw1x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw2x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdw2x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdw2x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw2x2x Search vendor "Dahuasecurity" for product "Ipc-hdw2x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw2x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hfw2x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hfw2x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw2x2x Search vendor "Dahuasecurity" for product "Ipc-hfw2x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw4x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdw4x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdw4x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw4x2x Search vendor "Dahuasecurity" for product "Ipc-hdw4x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw4x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hfw4x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hfw4x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw4x2x Search vendor "Dahuasecurity" for product "Ipc-hfw4x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdbw4x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdbw4x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdbw4x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdbw4x2x Search vendor "Dahuasecurity" for product "Ipc-hdbw4x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw5x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdw5x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdw5x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw5x2x Search vendor "Dahuasecurity" for product "Ipc-hdw5x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw5x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hfw5x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hfw5x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw5x2x Search vendor "Dahuasecurity" for product "Ipc-hfw5x2x" | - | - |
Safe
|