Vulnerability · Published Apr 9, 2020 · Assigned by dahua
CVE-2020-9500
Medium 4.9
In plain English
A medium-severity security flaw in IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Severity (CVSS NVD)4.9Medium
Exploit odds (30 days)1.0%top 35.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series | Versions which Build time before December,2019 |
References
- https://www.dahuasecurity.com/support/cybersecurity/details/727 x_refsource_MISC