CVE-2021-33045: Dahua IP Camera Authentication Bypass Vulnerability
Dahua IP cameras and related products contain an authentication bypass vulnerability when the loopback device is specified by the client during authentication.
Other sources
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Dahua IP Camera Firmwarefrom your environment.Discontinue use of the product if mitigations are unavailable.
- Compensating control
Apply mitigations per vendor instructions.
Event History
Frequently Asked Questions
What is CVE-2021-33045?
CVE-2021-33045 refers to the identity authentication bypass vulnerability found in some Dahua products during the login process.
How severe is CVE-2021-33045?
CVE-2021-33045 has a severity rating of 9.8, indicating a critical vulnerability.
Which Dahua products are affected by CVE-2021-33045?
Dahua products such as Dahuasecurity Ipc-hum7xxx Firmware, Dahuasecurity Ipc-hx3xxx Firmware, Dahuasecurity Ipc-hx5xxx Firmware, Dahuasecurity Nvr-1xxx Firmware, Dahuasecurity Nvr-2xxx Firmware, Dahuasecurity Nvr-4xxx Firmware, Dahuasecurity Nvr-5xxx Firmware, Dahuasecurity Nvr-6xx Firmware, Dahuasecurity Vth-542xh Firmware, Dahuasecurity Vto-65xxx Firmware, Dahuasecurity Vto-75x95x Firmware, Dahuasecurity Xvr-4x08 Firmware, Dahuasecurity Xvr-5x04 Firmware, Dahuasecurity Xvr-5x08 Firmware, Dahuasecurity Xvr-5x16 Firmware, Dahuasecurity Xvr-7x16 Firmware, and Dahuasecurity Xvr-7x32 Firmware may be affected.
How can an attacker exploit CVE-2021-33045?
An attacker can exploit CVE-2021-33045 by bypassing device identity authentication using malicious data packets.
Where can I find more information about CVE-2021-33045?
You can find more information about CVE-2021-33045 on the Dahua Security website.