CVE-2024-39948: Dahuasecurity NVR4104-4ks2/l Firmware

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.

Affected products

  • Dahuasecurity NVR4104-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4104-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4104-P-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4104-P-4ks3(960g) Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4104-P-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4104HS-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4104HS-4ks3(960g) Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4104HS-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4104HS-P-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4104HS-P-4ks3(960g) Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4104HS-P-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4108-4ks2/l Firmware: version 4.003.0000000.1.r.240515 only
  • Dahuasecurity NVR4108-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4108-8p-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4108-8p-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4108-P-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4108-P-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4108HS-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4108HS-4ks3(960g) Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4108HS-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4108HS-8p-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4108HS-8p-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4108HS-P-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • Dahuasecurity NVR4108HS-P-4ks3 Firmware: before 4.003.0000000.0.r.240312 (fixed in 4.003.0000000.0.r.240312)
  • Dahuasecurity NVR4116-4ks2/l Firmware: before 4.003.0000000.1.r.240515 (fixed in 4.003.0000000.1.r.240515)
  • and 31 more

Published 2024-07-31. Last modified 2026-06-17.