Approved changes feed: RSS · Atom

cpe:2.3:a:dahua_technology:ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDahua Technology (920403e3-303c-5161-9e35-1d2bc9b58e0b)
ProductIpc Hdw1X2X,Ipc Hfw1X2X,Ipc Hdw2X2X,Ipc Hfw2X2X,Ipc Hdw4X2X,Ipc Hfw4X2X,Ipc Hdbw4X2X,Ipc Hdw5X2X,Ipc Hfw5X2X (f9eb13ec-34c8-5cc5-8582-885c5f9c8ea2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9680 vulnerable 2026-06-08 05:14:25.994726 Details available
Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.
Published: 2019-09-18T18:36:13.000Z
Updated: 2024-08-04T21:54:45.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9679 vulnerable 2026-06-08 05:14:25.993524 Details available
Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.
Published: 2019-09-18T18:32:15.000Z
Updated: 2024-08-04T21:54:45.238Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9678 vulnerable 2026-06-08 05:14:25.992332 Details available
Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.
Published: 2019-09-18T18:42:45.000Z
Updated: 2024-08-04T21:54:45.263Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9677 vulnerable 2026-06-08 05:14:25.980837 Details available
The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.
Published: 2019-09-18T18:46:29.000Z
Updated: 2024-08-04T21:54:45.468Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.