Threat Investigation
Request a demo

CVE-2021-33044

CriticalActively exploited (CISA KEV)

Description

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

SeverityCritical
CVSS9.8
Exploit probability—
ProductDahua IP Camera Firmware
PublishedSep 15, 2021
First seenSep 15, 2021
Added to KEVAug 21, 2024
Weakness typeCWE-287Improper authentication

How to fix

CISA required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date: Sep 11, 2024
Update
  • dahuasecurity ipc-hum7xxx_firmware2.820.0000000.5.r.210705 or later
  • dahuasecurity ipc-hx3xxx_firmware2.800.0000000.29.r.210630 or later
  • dahuasecurity ipc-hx5xxx_firmware2.820.0000000.18.r.210705 or later
  • dahuasecurity sd1a1_firmware2.812.0000007.0.r.210706 or later
  • dahuasecurity sd22_firmware2.812.0000007.0.r.210706 or later
  • dahuasecurity sd49_firmware2.812.0000007.0.r.210706 or later
  • dahuasecurity sd50_firmware2.812.0000007.0.r.210706 or later
  • dahuasecurity sd52c_firmware2.812.0000007.0.r.210706 or later
  • dahuasecurity sd6al_firmware2.812.0000007.0.r.210706 or later
  • dahuasecurity tpc-bf1241_firmware2.630.0000000.6.r.210707 or later
  • dahuasecurity tpc-bf2221_firmware2.630.0000000.10.r.210707 or later
  • dahuasecurity tpc-bf5x01_firmware2.630.0000000.12.r.210707 or later

Affected products

ProductAffected versionsFixed in
dahuasecurity ipc-hum7xxx_firmwarev < 2.820.0000000.5.r.2107052.820.0000000.5.r.210705
dahuasecurity ipc-hx3xxx_firmwarev < 2.800.0000000.29.r.2106302.800.0000000.29.r.210630
dahuasecurity ipc-hx5xxx_firmwarev < 2.820.0000000.18.r.2107052.820.0000000.18.r.210705
dahuasecurity sd1a1_firmwarev < 2.812.0000007.0.r.2107062.812.0000007.0.r.210706
dahuasecurity sd22_firmwarev < 2.812.0000007.0.r.2107062.812.0000007.0.r.210706
dahuasecurity sd49_firmwarev < 2.812.0000007.0.r.2107062.812.0000007.0.r.210706
dahuasecurity sd50_firmwarev < 2.812.0000007.0.r.2107062.812.0000007.0.r.210706
dahuasecurity sd52c_firmwarev < 2.812.0000007.0.r.2107062.812.0000007.0.r.210706
dahuasecurity sd6al_firmwarev < 2.812.0000007.0.r.2107062.812.0000007.0.r.210706
dahuasecurity tpc-bf1241_firmwarev < 2.630.0000000.6.r.2107072.630.0000000.6.r.210707
dahuasecurity tpc-bf2221_firmwarev < 2.630.0000000.10.r.2107072.630.0000000.10.r.210707
dahuasecurity tpc-bf5x01_firmwarev < 2.630.0000000.12.r.2107072.630.0000000.12.r.210707
dahuasecurity tpc-pt8x21b_firmwarev < 2.630.0000000.10.r.2107012.630.0000000.10.r.210701
dahuasecurity tpc-sd2221_firmwarev ≤ 2.630.0000000.7.r.210707—
dahuasecurity tpc-sd8x21_firmwarev < 2.630.0000000.9.r.2107062.630.0000000.9.r.210706
dahuasecurity vto-65xxx_firmwarev < 4.300.0000004.0.r.2107154.300.0000004.0.r.210715
dahuasecurity vto-75x95x_firmwarev < 4.300.0000003.0.r.2107144.300.0000003.0.r.210714
dahuasecurity vth-542xh_firmwarev < 4.500.0000002.0.r.2107154.500.0000002.0.r.210715
dahuasecurity tpc-bf5x21_firmwarev < 2.630.0000000.8.r.2106302.630.0000000.8.r.210630

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.