Unpatched Dahua cams vulnerable to unauthenticated remote access

guest · Oct 7, 2021

Unpatched Dahua cams vulnerable to unauthenticated remote access
October 7, 2021
https://www.bleepingcomputer.com/ne...-vulnerable-to-unauthenticated-remote-access/

Unpatched Dahua cameras are prone to two authentication bypass vulnerabilities, and a proof of concept exploit that came out today makes the case of upgrading pressing.

The authentication bypass flaws are tracked as CVE-2021-33044 and CVE-2021-33045, and are both remotely exploitable during the login process by sending specially crafted data packets to the target device.
For more details on how that works, you may check out the proof of concept (PoC) that was part of today’s full disclosure, which has been posted on GitHub.
Click to expand...

This comes a month after Dahua’s security advisory which urged owners of vulnerable models to upgrade their firmware, but considering how neglected these devices are following their initial installation and set up, it’s likely that many of them are still running an old and vulnerable version.

It is important to clarify that not all of these devices are vulnerable to exploitation, but the list of the affected models contains some widely deployed ones.
Click to expand...

Log in or Sign up

Unpatched Dahua cams vulnerable to unauthenticated remote access

guest Guest

Log in or Sign up

Unpatched Dahua cams vulnerable to unauthenticated remote access

guest Guest

Useful Searches