What is CVE-2020-9499?

CVE-2020-9499 is a high-severity vulnerability in Dahua N54a4p, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 7.2/10. Published 2020-04-09.

How severe is CVE-2020-9499?

High severity. CVSS v3 base score is 7.2 out of 10.

Buffer overflow in Dahua N54a4p

CVE-2020-9499

Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down.

Vulnerability class: Buffer Overflow

EPSS: 0.015 (71.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dahua N54a4p
Dahuasecurity Ipc-hx2xxx
Dahuasecurity Ipc-hx2xxx_firmware
Dahuasecurity Ipc-hx5842h
Dahuasecurity Ipc-hx5842h_firmware
Dahuasecurity Ipc-hx7842h
Dahuasecurity Ipc-hx7842h_firmware
Dahuasecurity Ipc-hxxx5x4x
Dahuasecurity Ipc-hxxx5x4x_firmware
Dahuasecurity N42b1p

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

cybersecurity@dahuatech.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-9499?: CVE-2020-9499 is a high-severity vulnerability in Dahua N54a4p, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 7.2/10. Published 2020-04-09.
How severe is CVE-2020-9499?: High severity. CVSS v3 base score is 7.2 out of 10.