GCVE - cpe:2.3:o:dahuasecurity:sd6al_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:dahuasecurity:sd6al_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Dahuasecurity (`49e0e28a-d51a-562c-8056-164d442a6fc2`)
Product	Sd6Al Firmware (`09c28a85-c775-591f-b5c4-f5fc154fcf5b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-33046`	vulnerable	2026-06-08 05:32:08.649631	Details available Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords. Published: 2022-01-13T20:27:13.000Z Updated: 2024-08-03T23:42:19.550Z Open on db.gcve.eu Reference links https://www.dahuasecurity.com/support/cybersecurity/details/957 https://www.dahuasecurity.com/support/cybersecurity/details/987 https://support.dahuatech.com/networkSecurity/securityDetails?id=95	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-33044`	vulnerable	2026-06-08 05:32:08.601662	Details available The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. Published: 2021-09-15T21:36:04.000Z Updated: 2026-01-12T19:53:16.325Z Open on db.gcve.eu Reference links https://www.dahuasecurity.com/support/cybersecurity/details/957 http://seclists.org/fulldisclosure/2021/Oct/13 http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-9502`	vulnerable	2026-06-08 05:28:02.145229	Details available Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device. Published: 2020-05-13T15:21:12.000Z Updated: 2024-08-04T10:34:38.156Z Open on db.gcve.eu Reference links https://www.dahuasecurity.com/support/cybersecurity/details/777	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-9500`	vulnerable	2026-06-08 05:28:02.130417	Details available Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down. Published: 2020-04-09T13:21:01.000Z Updated: 2024-08-04T10:34:37.927Z Open on db.gcve.eu Reference links https://www.dahuasecurity.com/support/cybersecurity/details/727	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-9499`	vulnerable	2026-06-08 05:28:02.096614	Details available Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down. Published: 2020-04-09T13:19:23.000Z Updated: 2024-08-04T10:34:38.218Z Open on db.gcve.eu Reference links https://www.dahuasecurity.com/support/cybersecurity/details/727	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-9682`	vulnerable	2026-06-08 05:14:26.006065	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.