中危 Dahua访问控制漏洞（CVE-2021-33046）
CVE编号
CVE-2021-33046利用情况
暂无补丁情况
官方补丁披露时间
2022-01-14漏洞描述
Dahua IPC等都是中国大华（Dahua）公司的产品。Dahua IPC是Dahua Vto是一系列对讲设备。Dahua Vth是一系列数字室内机。 Dahua的多款产品的密码重置过程中存在访问控制漏洞。攻击者可利用该漏洞通过特定的部署重置设备密码。解决建议
Dahua已经为此发布了一个安全公告（DHCC-SA-202201-001）以及相应补丁:链接：https://www.dahuasecurity.com/support/cybersecurity/details/987受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | asc2204c_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | hcvr7xxx_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | hcvr8xxx_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | ipc-hx1xxx_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | ipc-hx2xxx_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | ipc-hx3xxx_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | ipc-hx5(4)(3)xxx_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | ipc-hx5xxx_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | nvr1xxx_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | nvr2xxx_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | nvr4xxx_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | nvr5xxx_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | sd1a1_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | sd22_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | sd49_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | sd50_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | sd52c_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | sd6al_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | tpc-bf1241_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | tpc-bf2221_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | tpc-bf5x01_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | tpc-pt8x21x_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | tpc-sd2221_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | tpc-sd8x21_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | vtox20xf_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | xvr4xxx_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | xvr5xxx_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 系统 | dahuasecurity | xvr7xxx_firmware | * | From (including) 2017-7 | Up to (including) 2021-7 | ||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | asc2204c | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | hcvr7xxx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | hcvr8xxx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | ipc-hx1xxx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | ipc-hx2xxx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | ipc-hx3xxx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | ipc-hx5(4)(3)xxx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | ipc-hx5xxx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | nvr1xxx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | nvr2xxx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | nvr4xxx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | nvr5xxx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | sd1a1 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | sd22 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | sd49 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | sd50 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | sd52c | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | sd6al | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | tpc-bf1241 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | tpc-bf2221 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | tpc-bf5x01 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | tpc-pt8x21x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | tpc-sd2221 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | tpc-sd8x21 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | vtox20xf | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | xvr4xxx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | xvr5xxx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dahuasecurity | xvr7xxx | - | - | |||||
- 攻击路径 远程
- 攻击复杂度 复杂
- 权限要求 无需权限
- 影响范围 全局影响
- EXP成熟度 未验证
- 补丁情况 官方补丁
- 数据保密性 无影响
- 数据完整性 无影响
- 服务器危害 无影响
- 全网数量 N/A
| CWE-ID | 漏洞类型 |
| CWE-287 | 认证机制不恰当 |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论