CVE-2019-9682: Dahuasecurity Ipc-HDBW1320E-W Firmware

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.

Affected products

• Dahuasecurity Ipc-HDBW1320E-W Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity Ipc-HX2XXX Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity Ipc-HX5842H Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity Ipc-HX7842H Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity Ipc-HXXX5X4X Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity n42b1p Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity n42b2p Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity n42b3p Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity n52a4p Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity n52b2p Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity n52b3p Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity n52b5p Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity n54a4p Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity n54b2p Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity PTZ1A Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity SD1A Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity SD50 Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity SD52C Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity SD5A Firmware: before 2019-12 (fixed in 2019-12)
• Dahuasecurity SD6AL Firmware: before 2019-12 (fixed in 2019-12)

Published 2020-05-13. Last modified 2026-06-17.