ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-33046

—
CVSS 3.1
9.8 critical
EPSS
1%p69
Published
()
Modified
Description

Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.

Vendors
dahuasecurity
Products
ipc-hx1xxx firmware, ipc-hx2xxx firmware, ipc-hx3xxx firmware, ipc-hx5\(4\)\(3\)xxx firmware, ipc-hx5xxx firmware, sd1a1 firmware, sd22 firmware, sd49 firmware, sd50 firmware, sd52c firmware, sd6al firmware, tpc-bf1241 firmware
Weakness
CWE-287
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news

No ingested article mentions this CVE yet.