CVE-2024-39945: Medium severity dahuasecurity nvr4104-4ks2/l firmware vulnerability
Published Jul 31, 2024
·Updated
A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device to crash.
Affected Software
112 affected components
All of the following
Dahuasecurity Nvr4104-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4104-4ks2\/l
All of the following
Dahuasecurity Nvr4108-4ks2\/l Firmware=4.003.0000000.1.r.240515
Dahuasecurity Nvr4108-4ks2\/l
All of the following
Dahuasecurity Nvr4116-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4116-4ks2\/l
All of the following
Dahuasecurity Nvr4104-p-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4104-p-4ks2\/l
All of the following
Dahuasecurity Nvr4108-p-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4108-p-4ks2\/l
All of the following
Dahuasecurity Nvr4108-8p-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4108-8p-4ks2\/l
All of the following
Dahuasecurity Nvr4116-8p-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4116-8p-4ks2\/l
All of the following
Dahuasecurity Nvr4104hs-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4104hs-4ks2\/l
All of the following
Dahuasecurity Nvr4108hs-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4108hs-4ks2\/l
All of the following
Dahuasecurity Nvr4104hs-p-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4104hs-p-4ks2\/l
All of the following
Dahuasecurity Nvr4108hs-p-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4108hs-p-4ks2\/l
All of the following
Dahuasecurity Nvr4108hs-8p-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4108hs-8p-4ks2\/l
All of the following
Dahuasecurity Nvr4116hs-8p-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4116hs-8p-4ks2\/l
All of the following
Dahuasecurity Nvr4204-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4204-4ks2\/l
All of the following
Dahuasecurity Nvr4208-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4208-4ks2\/l
All of the following
Dahuasecurity Nvr4216-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4216-4ks2\/l
All of the following
Dahuasecurity Nvr4204-p-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4204-p-4ks2\/l
All of the following
Dahuasecurity Nvr4208-8p-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4208-8p-4ks2\/l
All of the following
Dahuasecurity Nvr4216-16p-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4216-16p-4ks2\/l
All of the following
Dahuasecurity Nvr4232-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4232-4ks2\/l
All of the following
Dahuasecurity Nvr4232-16p-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4232-16p-4ks2\/l
All of the following
Dahuasecurity Nvr4116hs-4ks2\/l Firmware<4.003.0000000.1.r.240515
Dahuasecurity Nvr4116hs-4ks2\/l
All of the following
Dahuasecurity Nvr4416-4ks2\/i Firmware<4.001.0000001.6.r.240725
Dahuasecurity Nvr4416-4ks2\/i
All of the following
Dahuasecurity Nvr4416-16p-4ks2\/i Firmware<4.001.0000001.6.r.240725
Dahuasecurity Nvr4416-16p-4ks2\/i
All of the following
Dahuasecurity Nvr4432-16p-4ks2\/i Firmware<4.001.0000001.6.r.240725
Dahuasecurity Nvr4432-16p-4ks2\/i
All of the following
Dahuasecurity Nvr4816-4ks2\/i Firmware<4.001.0000001.6.r.240725
Dahuasecurity Nvr4816-4ks2\/i
All of the following
Dahuasecurity Nvr4816-16p-4ks2\/i Firmware<4.001.0000001.6.r.240725
Dahuasecurity Nvr4816-16p-4ks2\/i
All of the following
Dahuasecurity Nvr4832-4ks2\/i Firmware<4.001.0000001.6.r.240725
Dahuasecurity Nvr4832-4ks2\/i
All of the following
Dahuasecurity Nvr4832-16p-4ks2\/i Firmware<4.001.0000001.6.r.240725
Dahuasecurity Nvr4832-16p-4ks2\/i
All of the following
Dahuasecurity Nvr4432-4ks2\/i Firmware<4.001.0000001.6.r.240725
Dahuasecurity Nvr4432-4ks2\/i
All of the following
Dahuasecurity Nvr4232-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4232-4ks3
All of the following
Dahuasecurity Nvr4232-16p-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4232-16p-4ks3
All of the following
Dahuasecurity Nvr4216-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4216-4ks3
All of the following
Dahuasecurity Nvr4216-16p-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4216-16p-4ks3
All of the following
Dahuasecurity Nvr4208-8p-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4208-8p-4ks3
All of the following
Dahuasecurity Nvr4208-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4208-4ks3
All of the following
Dahuasecurity Nvr4204-p-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4204-p-4ks3
All of the following
Dahuasecurity Nvr4204-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4204-4ks3
All of the following
Dahuasecurity Nvr4116hs-8p-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4116hs-8p-4ks3
All of the following
Dahuasecurity Nvr4116hs-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4116hs-4ks3
All of the following
Dahuasecurity Nvr4108hs-p-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4108hs-p-4ks3
All of the following
Dahuasecurity Nvr4108hs-8p-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4108hs-8p-4ks3
All of the following
Dahuasecurity Nvr4108hs-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4108hs-4ks3
All of the following
Dahuasecurity Nvr4104hs-p-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4104hs-p-4ks3
All of the following
Dahuasecurity Nvr4104hs-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4104hs-4ks3
All of the following
Dahuasecurity Nvr4116-8p-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4116-8p-4ks3
All of the following
Dahuasecurity Nvr4116-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4116-4ks3
All of the following
Dahuasecurity Nvr4108-p-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4108-p-4ks3
All of the following
Dahuasecurity Nvr4104-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4104-4ks3
All of the following
Dahuasecurity Nvr4108-8p-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4108-8p-4ks3
All of the following
Dahuasecurity Nvr4108-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4108-4ks3
All of the following
Dahuasecurity Nvr4104-p-4ks3 Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4104-p-4ks3
All of the following
Dahuasecurity Nvr4104hs-p-4ks3\(960g\) Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4104hs-p-4ks3\(960g\)
All of the following
Dahuasecurity Nvr4104hs-4ks3\(960g\) Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4104hs-4ks3\(960g\)
All of the following
Dahuasecurity Nvr4108hs-4ks3\(960g\) Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4108hs-4ks3\(960g\)
All of the following
Dahuasecurity Nvr4104-p-4ks3\(960g\) Firmware<4.003.0000000.0.r.240312
Dahuasecurity Nvr4104-p-4ks3\(960g\)
Event History
Jul 31, 2024
CVE Published
via MITRE·03:16 AM
Data Sourced
via MITRE·03:16 AM
DescriptionSeverity
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-39945?
CVE-2024-39945 has a severity rating of high due to the potential for device crashes upon exploitation.
2
How do I fix CVE-2024-39945?
To fix CVE-2024-39945, update your Dahua device firmware to the latest version available from the manufacturer.
3
Which products are affected by CVE-2024-39945?
CVE-2024-39945 affects several Dahua NVR models including NVR4104-4KS2/L, NVR4108-4KS2/L, and others listed in the vulnerability report.
4
How can an attacker exploit CVE-2024-39945?
An attacker can exploit CVE-2024-39945 by obtaining the administrator's credentials and sending crafted data packets to the vulnerable interface.
5
Is there a workaround for CVE-2024-39945?
A possible workaround for CVE-2024-39945 is to restrict access to the vulnerable devices by limiting network access or disabling remote management features until a patch is applied.