PT-2019-19795 · Dahua · Dahua

Publicado 2019-09-17 · Atualizado 2020-08-24 · CVE-2019-9681

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dahua products versions prior to August 18, 2019

Description The issue concerns unencrypted online upgrade information in certain firmware packages of Dahua products. This allows attackers to obtain sensitive information by analyzing the firmware packages. The estimated number of potentially affected devices is not specified.

Recommendations For versions prior to August 18, 2019, update the firmware to a version released after August 18, 2019, to ensure the online upgrade information is properly encrypted.

Correção

Missing Encryption of Sensitive Data

Enumeração de Fraquezas

CWE-311

Identificadores relacionados

CVE-2019-9681

Produtos afetados

Dahua

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-9681 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-9681 · Aviso do Fabricante
• https://dahuasecurity.com/support/cybersecurity/details/637 · Aviso do Fabricante