CERT-UA: attackers control Dahua cameras and recorders via Easy4IP
Devices with Easy4IP dial out to Dahua’s cloud and can be opened by serial number without a public IP or open ports.
74
Product
Easy4IP
- Mentions · 7d3
- Mentions · 30d3
- All mentions4
- First seenAug 25, 2026
- Last mentioned3d ago
Timeline
4 articles · newest firstCERT-UA warns Dahua cameras in Ukraine hijacked via P2P and auth flaws
Attackers guess Easy4IP serial numbers and use weak passwords or CVE-2021-33044 and CVE-2021-33045 on outdated firmware.
76
CERT-UA warns hackers are compromising Dahua surveillance cameras
Attackers use Easy4IP serial patterns, weak passwords or outdated firmware to reach cameras even when they sit behind firewalls.
72
Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P
Hunt.io disclosed Operation CameraSwarm, compromising 14,500+ Dahua cameras via credential attacks, auth bypass CVEs, and P2P relay techniques across Ukraine and Russia.
64
Related CVEs
by mentions- CVE-2021-33045100%9.8Authentication Bypass in Dahua IP Cameras, NVRs and Video Intercoms
- CVE-2021-33044100%9.8Authentication Bypass in Dahua IP Camera Firmware
- CVE-2024-3994337%8.8rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload…
- CVE-2025-31702<1%6.8A vulnerability exists in certain Dahua embedded products
Appears with
- Dahuavendor · 4
- CERT-UAorganization · 3
- Dahua IP camerasproduct · 3
- Dahua video recordersproduct · 2
- Hunt.ioorganization · 2
- Operation CameraSwarmthreat actor · 1
- CISAvendor · 1
- ITRES Labsvendor · 1
- SSSCIPorganization · 1
- Dahua camerasproduct · 1
- NVDorganization · 1
- Hunt.iovendor · 1
- p2pwnproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.