PT-2021-20028 · Dahua · Dahua Ip Camera

Bashis · Published 2021-09-07 · Updated 2025-11-12 · CVE-2021-33045

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dahua IP Camera firmware versions <2.820.0000000.5.r.210705

Description The issue is related to an identity authentication bypass during the login process. Attackers can construct malicious data packets to bypass device identity authentication.

Recommendations For Dahua IP Camera firmware versions <2.820.0000000.5.r.210705, update to a version equal to or later than 2.820.0000000.5.r.210705 to resolve the issue.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-33045

Affected Products

Dahua Ip Camera

References · 29

• 🔥 https://github.com/dongpohezui/cve-2021-33045 · Exploit
• 🔥 http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2021/Oct/13 · Exploit
• https://dahuasecurity.com/support/cybersecurity/details/957 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-33045 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33045 · Security Note
• https://dahuasecurity.com/aboutUs/trustedCenter/details/582 · Security Note
• https://twitter.com/rst_cloud/status/1832221302519673042 · Twitter Post
• https://twitter.com/rst_cloud/status/1833292206867665056 · Twitter Post
• https://twitter.com/XynikIT/status/1826604649555661216 · Twitter Post
• https://twitter.com/CISACyber/status/1826278275901018561 · Twitter Post
• https://t.me/cveNotify/142287 · Telegram Post
• https://twitter.com/ohhara_shiojiri/status/1826493426876981403 · Twitter Post
• https://t.me/defcon_news/84503 · Telegram Post
• https://twitter.com/Loginsoft_Inc/status/1826561126353473899 · Twitter Post