Dahuasecurity NVR4208-4ks2/l Firmware vulnerabilities

7 CVEs affecting Dahuasecurity NVR4208-4ks2/l Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-39950, published 2024-07-31.

More from Dahuasecurity.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-39949, published 2024-07-31. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.
• CVE-2024-39948, published 2024-07-31. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.
• CVE-2024-39944, published 2024-07-31. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.
• CVE-2024-39950, published 2024-07-31. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization.
• CVE-2024-39947, published 2024-07-31. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packet to the interface with…
• CVE-2024-39945, published 2024-07-31. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been found in Dahua products.  After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with…
• CVE-2024-39946, published 2024-07-31. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with…