Dahuasecurity Ipc-HDW2X2X Firmware vulnerabilities

5 CVEs affecting Dahuasecurity Ipc-HDW2X2X Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-9680, published 2019-09-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-9680, published 2019-09-18. Medium severity, CVSS 5.3. EPSS: 1.4% chance of exploitation in the next 30 days. Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include:…
CVE-2019-9677, published 2019-09-18. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include:…
CVE-2019-9678, published 2019-09-18. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include:…
CVE-2019-9679, published 2019-09-18. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include:…
CVE-2019-9681, published 2019-09-17. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products…