Product:

Ipc\-Hfw5x2x_firmware

(Dahuasecurity)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 5
Date Id Summary Products Score Patch Annotated
2019-09-18 CVE-2019-9678 Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019. Ipc\-Hdbw4x2x_firmware, Ipc\-Hdw1x2x_firmware, Ipc\-Hdw2x2x_firmware, Ipc\-Hdw4x2x_firmware, Ipc\-Hdw5x2x_firmware, Ipc\-Hfw1x2x_firmware, Ipc\-Hfw2x2x_firmware, Ipc\-Hfw4x2x_firmware, Ipc\-Hfw5x2x_firmware 7.5
2019-09-18 CVE-2019-9680 Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019. Ipc\-Hdbw4x2x_firmware, Ipc\-Hdw1x2x_firmware, Ipc\-Hdw2x2x_firmware, Ipc\-Hdw4x2x_firmware, Ipc\-Hdw5x2x_firmware, Ipc\-Hfw1x2x_firmware, Ipc\-Hfw2x2x_firmware, Ipc\-Hfw4x2x_firmware, Ipc\-Hfw5x2x_firmware 5.3
2019-09-17 CVE-2019-9681 Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019. Ipc\-Hdbw4x2x_firmware, Ipc\-Hdw1x2x_firmware, Ipc\-Hdw2x2x_firmware, Ipc\-Hdw4x2x_firmware, Ipc\-Hdw5x2x_firmware, Ipc\-Hfw1x2x_firmware, Ipc\-Hfw2x2x_firmware, Ipc\-Hfw4x2x_firmware, Ipc\-Hfw5x2x_firmware N/A
2019-09-18 CVE-2019-9679 Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019. Ipc\-Hdbw4x2x_firmware, Ipc\-Hdw1x2x_firmware, Ipc\-Hdw2x2x_firmware, Ipc\-Hdw4x2x_firmware, Ipc\-Hdw5x2x_firmware, Ipc\-Hfw1x2x_firmware, Ipc\-Hfw2x2x_firmware, Ipc\-Hfw4x2x_firmware, Ipc\-Hfw5x2x_firmware N/A
2019-09-18 CVE-2019-9677 The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019. Ipc\-Hdbw4x2x_firmware, Ipc\-Hdw1x2x_firmware, Ipc\-Hdw2x2x_firmware, Ipc\-Hdw4x2x_firmware, Ipc\-Hdw5x2x_firmware, Ipc\-Hfw1x2x_firmware, Ipc\-Hfw2x2x_firmware, Ipc\-Hfw4x2x_firmware, Ipc\-Hfw5x2x_firmware N/A