CVE-2021-33046

State: Published
Severity: Not scored
Published: Jan 13, 2022
Updated: Aug 3, 2024
Reserved: May 17, 2021

Description

Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Access control vulnerability found in some Dahua productsn/a	Dahua IP Camera devices IPC-HX3XXX, and IPC-HX5XXXAffected PTZ Dome Camera SD1A1, SD22, SD49, SD50, SD52C, and SD6ALAffected Thermal TPC-BF1241,TPC-BF2221, TPC-SD2221Affected VTO2101E, VTOX221E, and ASC2204C devices Buildtime between 2017/7 ~ 2021/7. NVR devices NVR4XXX, and NVR5XXXAffected XVR devices XVR4XXX, and XVR5XXXAffected HCVR devices HCVR7XXX, and HCVR8XXX devices Buildtime between 2017/1 ~ 2021/7.Affected

Product

Versions

Access control vulnerability found in some Dahua productsn/a

Dahua IP Camera devices IPC-HX3XXX, and IPC-HX5XXXAffected
PTZ Dome Camera SD1A1, SD22, SD49, SD50, SD52C, and SD6ALAffected
Thermal TPC-BF1241,TPC-BF2221, TPC-SD2221Affected
VTO2101E, VTOX221E, and ASC2204C devices Buildtime between 2017/7 ~ 2021/7. NVR devices NVR4XXX, and NVR5XXXAffected
XVR devices XVR4XXX, and XVR5XXXAffected
HCVR devices HCVR7XXX, and HCVR8XXX devices Buildtime between 2017/1 ~ 2021/7.Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.