PT-2020-11365 · Dahua · Dahua

Published 2020-05-13 · Updated 2020-05-18 · CVE-2019-9682

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dahua devices with Build time before December 2019

Description The issue concerns Dahua devices that use a weak security login mode for compatibility with earlier devices. If a user employs this weak security login method, an attacker can intercept network packets to attack the device by monitoring its network.

Recommendations For Dahua devices with Build time before December 2019, disable the weak security login method to prevent potential attacks.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2019-9682

Affected Products

Dahua

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-9682 · Security Note
• https://dahuasecurity.com/support/cybersecurity/details/767 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-9682 · Vendor Advisory
• https://t.me/cvenotify/3744 · Telegram Post