Dahuasecurity Ipc-Hdw1x2x
5 CVEs affecting Dahuasecurity Ipc-Hdw1x2x. Latest disclosed: 2019-09-18. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9677 | Critical | 9.8 | 2019-09-18 | The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packet… |
CVE-2019-9679 | High | 8.8 | 2019-09-18 | Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include… |
CVE-2019-9678 | High | 7.5 | 2019-09-18 | Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet… |
CVE-2019-9680 | Medium | 5.3 | 2019-09-18 | Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious d… |
CVE-2019-9681 | Medium | 5.3 | 2019-09-17 | Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages b… |