What is CVE-2020-9500?

CVE-2020-9500 is a medium-severity vulnerability in Dahua N54a4p. CVSS score: 4.9/10. Published 2020-04-09.

How severe is CVE-2020-9500?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Vulnerability in Dahua N54a4p

CVE-2020-9500

Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down.

EPSS: 0.010 (60.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H.

Affected products

Dahua N54a4p
Dahuasecurity Ipc-hx2xxx
Dahuasecurity Ipc-hx2xxx_firmware
Dahuasecurity Ipc-hx5842h
Dahuasecurity Ipc-hx5842h_firmware
Dahuasecurity Ipc-hx7842h
Dahuasecurity Ipc-hx7842h_firmware
Dahuasecurity Ipc-hxxx5x4x
Dahuasecurity Ipc-hxxx5x4x_firmware
Dahuasecurity N42b1p

References

cybersecurity@dahuatech.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-9500?: CVE-2020-9500 is a medium-severity vulnerability in Dahua N54a4p. CVSS score: 4.9/10. Published 2020-04-09.
How severe is CVE-2020-9500?: Medium severity. CVSS v3 base score is 4.9 out of 10.