What’s Vulnerable › Vulnerabilities

CVE-2020-9499

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-09 · updated 2026-06-17
• Weakness: CWE-120

Description

Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down.

Affected products

• Dahuasecurity Ipc-Hx2Xxx Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Ipc-Hx5842H Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Ipc-Hx7842H Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Ipc-Hxxx5X4X Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N42B1P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N42B2P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N42B3P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N52A4P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N52B2P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N52B3P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N52B5P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N54A4P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N54B2P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Ptz1A Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd1A Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd50 Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd52C Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd5A Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd6Al Firmware: before 2019-12 — fixed in 2019-12

How to fix

Upgrade to a fixed version: Dahuasecurity Ipc-Hx2Xxx Firmware 2019-12; Dahuasecurity Ipc-Hx5842H Firmware 2019-12; Dahuasecurity Ipc-Hx7842H Firmware 2019-12; Dahuasecurity Ipc-Hxxx5X4X Firmware 2019-12; Dahuasecurity N42B1P Firmware 2019-12; Dahuasecurity N42B2P Firmware 2019-12; Dahuasecurity N42B3P Firmware 2019-12; Dahuasecurity N52A4P Firmware 2019-12; Dahuasecurity N52B2P Firmware 2019-12; Dahuasecurity N52B3P Firmware 2019-12; Dahuasecurity N52B5P Firmware 2019-12; Dahuasecurity N54A4P Firmware 2019-12. Check the vendor advisory for mitigations.

References

• https://www.dahuasecurity.com/support/cybersecurity/details/727
• https://www.dahuasecurity.com/support/cybersecurity/details/727

Get alerted when CVE-2020-9499 or the next vulnerability affects your stack