CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-33046
Critical (9.8) in dahuasecurity. EPSS 1.3% chance of exploitation in the next 30 days.
Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dahuasecurity:asc2204c_firmware
- dahuasecurity:hcvr7xxx_firmware
- dahuasecurity:hcvr8xxx_firmware
- dahuasecurity:ipc-hx1xxx_firmware
- dahuasecurity:ipc-hx2xxx_firmware
- dahuasecurity:ipc-hx3xxx_firmware
- dahuasecurity:ipc-hx5\(4\)\(3\)xxx_firmware
- dahuasecurity:ipc-hx5xxx_firmware
- dahuasecurity:nvr1xxx_firmware
- dahuasecurity:nvr2xxx_firmware
- dahuasecurity:nvr4xxx_firmware
- dahuasecurity:nvr5xxx_firmware
- dahuasecurity:sd1a1_firmware
- dahuasecurity:sd22_firmware
- dahuasecurity:sd49_firmware
- dahuasecurity:sd50_firmware
- dahuasecurity:sd52c_firmware
- dahuasecurity:sd6al_firmware
- dahuasecurity:tpc-bf1241_firmware
- dahuasecurity:tpc-bf2221_firmware
- dahuasecurity:tpc-bf5x01_firmware
- dahuasecurity:tpc-pt8x21x_firmware
- dahuasecurity:tpc-sd2221_firmware
- dahuasecurity:tpc-sd8x21_firmware
- dahuasecurity:vtox20xf_firmware
- dahuasecurity:xvr4xxx_firmware
- dahuasecurity:xvr5xxx_firmware
- dahuasecurity:xvr7xxx_firmware
References
- https://support.dahuatech.com/networkSecurity/securityDetails?id=95
- https://www.dahuasecurity.com/support/cybersecurity/details/957
- https://www.dahuasecurity.com/support/cybersecurity/details/987
- https://support.dahuatech.com/networkSecurity/securityDetails?id=95
- https://www.dahuasecurity.com/support/cybersecurity/details/957