VULNERABILITY INTELLIGENCE

CVE-2021-33045

CVSS score9.8 CRITICAL

EPSS probability99.59%

CISA KEVKnown exploited vulnerability

Published2021-09-15

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Dahua IP Camera Authentication Bypass Vulnerability

Vendor / product: Dahua / IP Camera Firmware

Description

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

Weakness classification

nvd@nist.gov: CWE-287
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-287

Primary references

cybersecurity@dahuatech.com — Exploit, Third Party Advisory, VDB Entry
cybersecurity@dahuatech.com — Exploit, Mailing List, Third Party Advisory
cybersecurity@dahuatech.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource