What’s Vulnerable › Vulnerabilities

CVE-2020-9502

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-13 · updated 2026-06-17
• Weakness: CWE-330

Description

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device.

Affected products

• Dahuasecurity Ipc-Hdbw1320E-W Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Ipc-Hx2Xxx Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Ipc-Hx5842H Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Ipc-Hx7842H Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Ipc-Hxxx5X4X Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N42B1P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N42B2P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N42B3P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N52A4P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N52B2P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N52B3P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N52B5P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N54A4P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity N54B2P Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Ptz1A Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd1A Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd50 Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd52C Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd5A Firmware: before 2019-12 — fixed in 2019-12
• Dahuasecurity Sd6Al Firmware: before 2019-12 — fixed in 2019-12

How to fix

Upgrade to a fixed version: Dahuasecurity Ipc-Hdbw1320E-W Firmware 2019-12; Dahuasecurity Ipc-Hx2Xxx Firmware 2019-12; Dahuasecurity Ipc-Hx5842H Firmware 2019-12; Dahuasecurity Ipc-Hx7842H Firmware 2019-12; Dahuasecurity Ipc-Hxxx5X4X Firmware 2019-12; Dahuasecurity N42B1P Firmware 2019-12; Dahuasecurity N42B2P Firmware 2019-12; Dahuasecurity N42B3P Firmware 2019-12; Dahuasecurity N52A4P Firmware 2019-12; Dahuasecurity N52B2P Firmware 2019-12; Dahuasecurity N52B3P Firmware 2019-12; Dahuasecurity N52B5P Firmware 2019-12. Check the vendor advisory for mitigations.

References

• https://www.dahuasecurity.com/support/cybersecurity/details/777
• https://www.dahuasecurity.com/support/cybersecurity/details/777

Get alerted when CVE-2020-9502 or the next vulnerability affects your stack