What’s Vulnerable › Vulnerabilities

CVE-2019-9682

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-13 · updated 2026-06-17
• Weakness: CWE-276

Description

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.

Affected products

• Dahuasecurity Ipc-Hdbw1320E-W Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Ipc-Hx2Xxx Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Ipc-Hx5842H Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Ipc-Hx7842H Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Ipc-Hxxx5X4X Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N42B1P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N42B2P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N42B3P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N52A4P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N52B2P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N52B3P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N52B5P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N54A4P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N54B2P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Ptz1A Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd1A Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd50 Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd52C Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd5A Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd6Al Firmware: before 2019-12 — fixed in 2019-12

How to fix

Upgrade to a fixed version: Dahuasecurity Ipc-Hdbw1320E-W Firmware 2019-12; Dahuasecurity Ipc-Hx2Xxx Firmware 2019-12; Dahuasecurity Ipc-Hx5842H Firmware 2019-12; Dahuasecurity Ipc-Hx7842H Firmware 2019-12; Dahuasecurity Ipc-Hxxx5X4X Firmware 2019-12; Dahuasecurity N42B1P Firmware 2019-12; Dahuasecurity N42B2P Firmware 2019-12; Dahuasecurity N42B3P Firmware 2019-12; Dahuasecurity N52A4P Firmware 2019-12; Dahuasecurity N52B2P Firmware 2019-12; Dahuasecurity N52B3P Firmware 2019-12; Dahuasecurity N52B5P Firmware 2019-12. Check the vendor advisory for mitigations.

References

• https://www.dahuasecurity.com/support/cybersecurity/details/767
• https://www.dahuasecurity.com/support/cybersecurity/details/767

Get alerted when CVE-2019-9682 or the next vulnerability affects your stack