Actively exploited in the wild
Dahua IP Camera Authentication Bypass Vulnerability
Dahua - IP Camera Firmware · Listed in the CISA KEV since 2024-08-21. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2021-33045
CriticalCVSS 9.8KEVSummary
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
Risk Assessment
The risk includes unauthorized access to Dahua devices, which could lead to privacy breaches and integrity of surveillance.
Recommendation
It is recommended to update Dahua product firmware to the latest version and monitor logs for suspicious login attempts.
Other vulnerabilities in Dahua
Original NVD description (English source)
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.