CVE-2021-33044: Dahua IP Camera Authentication Bypass Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2024-08-21. EPSS: 100% chance of exploitation in the next 30 days.

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

Affected products

• Dahuasecurity Ipc-HUM7XXX Firmware: before 2.820.0000000.5.r.210705 (fixed in 2.820.0000000.5.r.210705)
• Dahuasecurity Ipc-HX3XXX Firmware: before 2.800.0000000.29.r.210630 (fixed in 2.800.0000000.29.r.210630)
• Dahuasecurity Ipc-HX5XXX Firmware: before 2.820.0000000.18.r.210705 (fixed in 2.820.0000000.18.r.210705)
• Dahuasecurity SD1A1 Firmware: before 2.812.0000007.0.r.210706 (fixed in 2.812.0000007.0.r.210706)
• Dahuasecurity SD22 Firmware: before 2.812.0000007.0.r.210706 (fixed in 2.812.0000007.0.r.210706)
• Dahuasecurity SD49 Firmware: before 2.812.0000007.0.r.210706 (fixed in 2.812.0000007.0.r.210706)
• Dahuasecurity SD50 Firmware: before 2.812.0000007.0.r.210706 (fixed in 2.812.0000007.0.r.210706)
• Dahuasecurity SD52C Firmware: before 2.812.0000007.0.r.210706 (fixed in 2.812.0000007.0.r.210706)
• Dahuasecurity SD6AL Firmware: before 2.812.0000007.0.r.210706 (fixed in 2.812.0000007.0.r.210706)
• Dahuasecurity Tpc-BF1241 Firmware: before 2.630.0000000.6.r.210707 (fixed in 2.630.0000000.6.r.210707)
• Dahuasecurity Tpc-BF2221 Firmware: before 2.630.0000000.10.r.210707 (fixed in 2.630.0000000.10.r.210707)
• Dahuasecurity Tpc-BF5X01 Firmware: before 2.630.0000000.12.r.210707 (fixed in 2.630.0000000.12.r.210707)
• Dahuasecurity Tpc-BF5X21 Firmware: before 2.630.0000000.8.r.210630 (fixed in 2.630.0000000.8.r.210630)
• Dahuasecurity Tpc-PT8X21B Firmware: before 2.630.0000000.10.r.210701 (fixed in 2.630.0000000.10.r.210701)
• Dahuasecurity Tpc-SD2221 Firmware: up to and including 2.630.0000000.7.r.210707
• Dahuasecurity Tpc-SD8X21 Firmware: before 2.630.0000000.9.r.210706 (fixed in 2.630.0000000.9.r.210706)
• Dahuasecurity Vth-542xh Firmware: before 4.500.0000002.0.r.210715 (fixed in 4.500.0000002.0.r.210715)
• Dahuasecurity Vto-65xxx Firmware: before 4.300.0000004.0.r.210715 (fixed in 4.300.0000004.0.r.210715)
• Dahuasecurity Vto-75x95x Firmware: before 4.300.0000003.0.r.210714 (fixed in 4.300.0000003.0.r.210714)

Published 2021-09-15. Last modified 2026-06-17.