CVE-2024-39947: Dahuasecurity NVR4104-4ks2/l Firmware

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device to crash.

Affected products

  • Dahuasecurity NVR4104-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4104-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4104-P-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4104-P-4ks3(960g) Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4104-P-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4104HS-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4104HS-4ks3(960g) Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4104HS-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4104HS-P-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4104HS-P-4ks3(960g) Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4104HS-P-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4108-4ks2/l Firmware: version 4.003.0000000.1.r.240515 only
  • Dahuasecurity NVR4108-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4108-8p-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4108-8p-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4108-P-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4108-P-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4108HS-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4108HS-4ks3(960g) Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4108HS-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4108HS-8p-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4108HS-8p-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4108HS-P-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4108HS-P-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4116-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • and 31 more

Published 2024-07-31. Last modified 2026-06-17.