Ipc Hfw2X2X Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:dahuasecurity:ipc-hfw2x2x_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Dahuasecurity (49e0e28a-d51a-562c-8056-164d442a6fc2) |
|---|---|
| Product | Ipc Hfw2X2X Firmware (27d2f7af-8b0c-5cfc-857c-8ade4e9a0ac6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-9681 |
vulnerable | 2026-06-08 05:14:26.001966 |
Details available
Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.
Published: 2019-09-17T16:02:18.000Z
Updated: 2024-08-04T21:54:45.133Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9680 |
vulnerable | 2026-06-08 05:14:25.995036 |
Details available
Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.
Published: 2019-09-18T18:36:13.000Z
Updated: 2024-08-04T21:54:45.483Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9679 |
vulnerable | 2026-06-08 05:14:25.993845 |
Details available
Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.
Published: 2019-09-18T18:32:15.000Z
Updated: 2024-08-04T21:54:45.238Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9678 |
vulnerable | 2026-06-08 05:14:25.992574 |
Details available
Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.
Published: 2019-09-18T18:42:45.000Z
Updated: 2024-08-04T21:54:45.263Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9677 |
vulnerable | 2026-06-08 05:14:25.985039 |
Details available
The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.
Published: 2019-09-18T18:46:29.000Z
Updated: 2024-08-04T21:54:45.468Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.