CVE-2019-9681
Severity Score
5.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.
La información de actualización en línea en algunos paquetes de firmware de productos Dahua no está encriptada. Los atacantes pueden obtener esta información mediante el análisis de paquetes de firmware por medios específicos. Los productos afectados incluyen: IPC-HDW1X2X, IPC-HFW1X2X, IPC-HDW2X2X, IPC-HFW2X2X, IPC-HDW4X2X, IPC-HFW4X2X, IPC-HDBW4X2X, IPC-HDW5X2X, IPC-HX2, para versiones cuyo tiempo de compilación es antes del 18 de agosto de 2019.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-03-11 CVE Reserved
- 2019-09-17 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-311: Missing Encryption of Sensitive Data
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.dahuasecurity.com/support/cybersecurity/details/637 | 2020-08-24 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw1x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdw1x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdw1x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw1x2x Search vendor "Dahuasecurity" for product "Ipc-hdw1x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw1x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hfw1x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hfw1x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw1x2x Search vendor "Dahuasecurity" for product "Ipc-hfw1x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw2x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdw2x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdw2x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw2x2x Search vendor "Dahuasecurity" for product "Ipc-hdw2x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw2x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hfw2x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hfw2x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw2x2x Search vendor "Dahuasecurity" for product "Ipc-hfw2x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw4x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdw4x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdw4x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw4x2x Search vendor "Dahuasecurity" for product "Ipc-hdw4x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw4x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hfw4x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hfw4x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw4x2x Search vendor "Dahuasecurity" for product "Ipc-hfw4x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdbw4x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdbw4x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdbw4x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdbw4x2x Search vendor "Dahuasecurity" for product "Ipc-hdbw4x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw5x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdw5x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdw5x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw5x2x Search vendor "Dahuasecurity" for product "Ipc-hdw5x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw5x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hfw5x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hfw5x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw5x2x Search vendor "Dahuasecurity" for product "Ipc-hfw5x2x" | - | - |
Safe
|