CVE-2024-39947
Medium
Description
A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device to crash.
SeverityMedium
CVSS6.5
Exploit probability—
ProductDahuasecurity Nvr4104-4ks2\/l Firmware
PublishedJul 31, 2024
First seenJul 31, 2024
How to fix
Update
- dahuasecurity nvr4104-4ks2\/l_firmware4.003.0000000.1.r.240515 or later
- dahuasecurity nvr4116-4ks2\/l_firmware4.003.0000000.1.r.240515 or later
- dahuasecurity nvr4104-p-4ks2\/l_firmware4.003.0000000.1.r.240515 or later
- dahuasecurity nvr4108-p-4ks2\/l_firmware4.003.0000000.1.r.240515 or later
- dahuasecurity nvr4108-8p-4ks2\/l_firmware4.003.0000000.1.r.240515 or later
- dahuasecurity nvr4116-8p-4ks2\/l_firmware4.003.0000000.1.r.240515 or later
- dahuasecurity nvr4104hs-4ks2\/l_firmware4.003.0000000.1.r.240515 or later
- dahuasecurity nvr4108hs-4ks2\/l_firmware4.003.0000000.1.r.240515 or later
- dahuasecurity nvr4104hs-p-4ks2\/l_firmware4.003.0000000.1.r.240515 or later
- dahuasecurity nvr4108hs-p-4ks2\/l_firmware4.003.0000000.1.r.240515 or later
- dahuasecurity nvr4108hs-8p-4ks2\/l_firmware4.003.0000000.1.r.240515 or later
- dahuasecurity nvr4116hs-8p-4ks2\/l_firmware4.003.0000000.1.r.240515 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dahuasecurity nvr4104-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4108-4ks2\/l_firmware | 4.003.0000000.1.r.240515 | — |
| dahuasecurity nvr4116-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4104-p-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4108-p-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4108-8p-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4116-8p-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4104hs-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4108hs-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4104hs-p-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4108hs-p-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4108hs-8p-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4116hs-8p-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4204-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4208-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4216-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4204-p-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4208-8p-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4216-16p-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4232-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4232-16p-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4116hs-4ks2\/l_firmware | v < 4.003.0000000.1.r.240515 | 4.003.0000000.1.r.240515 |
| dahuasecurity nvr4416-4ks2\/i_firmware | v < 4.001.0000001.6.r.240725 | 4.001.0000001.6.r.240725 |
| dahuasecurity nvr4416-16p-4ks2\/i_firmware | v < 4.001.0000001.6.r.240725 | 4.001.0000001.6.r.240725 |
| dahuasecurity nvr4432-16p-4ks2\/i_firmware | v < 4.001.0000001.6.r.240725 | 4.001.0000001.6.r.240725 |
| dahuasecurity nvr4816-4ks2\/i_firmware | v < 4.001.0000001.6.r.240725 | 4.001.0000001.6.r.240725 |
| dahuasecurity nvr4816-16p-4ks2\/i_firmware | v < 4.001.0000001.6.r.240725 | 4.001.0000001.6.r.240725 |
| dahuasecurity nvr4832-4ks2\/i_firmware | v < 4.001.0000001.6.r.240725 | 4.001.0000001.6.r.240725 |
| dahuasecurity nvr4832-16p-4ks2\/i_firmware | v < 4.001.0000001.6.r.240725 | 4.001.0000001.6.r.240725 |
| dahuasecurity nvr4432-4ks2\/i_firmware | v < 4.001.0000001.6.r.240725 | 4.001.0000001.6.r.240725 |
| dahuasecurity nvr4232-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4232-16p-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4216-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4216-16p-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4208-8p-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4208-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4204-p-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4204-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4116hs-8p-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4116hs-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4108hs-p-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4108hs-8p-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4108hs-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4104hs-p-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4104hs-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4116-8p-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4116-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4108-p-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4104-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4108-8p-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4108-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4104-p-4ks3_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4104hs-p-4ks3\(960g\)_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4104hs-4ks3\(960g\)_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4108hs-4ks3\(960g\)_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
| dahuasecurity nvr4104-p-4ks3\(960g\)_firmware | v < 4.003.0000000.0.r.240312 | 4.003.0000000.0.r.240312 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.