PT-2021-20027 · Dahua · Dahua Ip Camera

Bashis · Published 2021-09-07 · Updated 2026-04-02 · CVE-2021-33044

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dahua IP Camera firmware versions prior to 2.820.0000000.5.r.210705

Description An identity authentication bypass issue exists in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. This issue is actively exploited.

Recommendations Update the Dahua IP Camera firmware to version 2.820.0000000.5.r.210705 or later.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-33044

Affected Products

Dahua Ip Camera

References · 38

• 🔥 https://github.com/bp2008/DahuaLoginBypass · Exploit
• 🔥 http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html · Exploit
• 🔥❌ https://github.com/dorkerdevil/CVE-2021-33044 · Exploit, Deleted
• 🔥 http://seclists.org/fulldisclosure/2021/Oct/13 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-33044 · Security Note
• https://osv.dev/vulnerability/CVE-2021-33044 · Vendor Advisory
• https://dahuasecurity.com/aboutUs/trustedCenter/details/582 · Security Note
• https://dahuasecurity.com/support/cybersecurity/details/957 · Vendor Advisory
• https://twitter.com/rst_cloud/status/1857749035471216927 · Twitter Post
• https://t.me/cveNotify/142286 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1827249097142890864 · Twitter Post
• https://twitter.com/transilienceai/status/1834917222352880086 · Twitter Post
• https://t.me/defcon_news/86790 · Telegram Post
• https://t.me/aptreports/12497 · Telegram Post
• https://twitter.com/rst_cloud/status/1832221336732606912 · Twitter Post