CVE-2021-33045

Description

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

Problem types

Improper Authentication

References

https://www.dahuasecurity.com/support/cybersecurity/details/957

http://seclists.org/fulldisclosure/2021/Oct/13 (20211005 [Update]: Dahua Authentication bypass (CVE-2021-33044, CVE-2021-33045)) mailing-list

http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html

cve.org CVE-2021-33045

nvd.nist.gov CVE-2021-33045

Download JSON