CVE-2019-9682: High severity dahua security sd6al firmware vulnerability
Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-9682?
CVE-2019-9682 is a vulnerability found in Dahua devices with build time before December 2019 that allows an attacker to exploit weak security login modes.
How does CVE-2019-9682 affect Dahua devices?
CVE-2019-9682 affects Dahua devices with build time before December 2019 by allowing an attacker to exploit weak security login modes.
What is the severity of CVE-2019-9682?
CVE-2019-9682 has a severity value of 8.1, which is considered high.
How can I fix CVE-2019-9682?
To fix CVE-2019-9682, users should update their Dahua devices to the latest firmware released after December 2019.
Where can I find more information about CVE-2019-9682?
You can find more information about CVE-2019-9682 on the Dahua Security website at https://www.dahuasecurity.com/support/cybersecurity/details/767.