CVE-2021-33046: Dahuasecurity ASC2204C Firmware

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.

Affected products

• Dahuasecurity ASC2204C Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity HCVR7XXX Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity HCVR8XXX Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity Ipc-HX1XXX Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity Ipc-HX2XXX Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity Ipc-HX3XXX Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity Ipc-HX5(4)(3)XXX Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity Ipc-HX5XXX Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity NVR1XXX Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity NVR2XXX Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity NVR4XXX Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity NVR5XXX Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity SD1A1 Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity SD22 Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity SD49 Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity SD50 Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity SD52C Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity SD6AL Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity Tpc-BF1241 Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity Tpc-BF2221 Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity Tpc-BF5X01 Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity Tpc-PT8X21X Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity Tpc-SD2221 Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity Tpc-SD8X21 Firmware: from 2017-7, up to and including 2021-7
• Dahuasecurity VTOX20XF Firmware: from 2017-7, up to and including 2021-7
• and 3 more

Published 2022-01-13. Last modified 2026-06-17.