GCVE - cpe:2.3:h:dahuasecurity:sd6al:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dahuasecurity:sd6al:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dahuasecurity (`49e0e28a-d51a-562c-8056-164d442a6fc2`)
Product	Sd6Al (`69a858d4-12cc-5c9e-9c1c-076d32eaefbc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-33046`	not_vulnerable	2026-06-08 05:32:08.649648	Details available Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords. Published: 2022-01-13T20:27:13.000Z Updated: 2024-08-03T23:42:19.550Z Open on db.gcve.eu Reference links https://www.dahuasecurity.com/support/cybersecurity/details/957 https://www.dahuasecurity.com/support/cybersecurity/details/987 https://support.dahuatech.com/networkSecurity/securityDetails?id=95	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-33044`	not_vulnerable	2026-06-08 05:32:08.602181	Details available The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. Published: 2021-09-15T21:36:04.000Z Updated: 2026-01-12T19:53:16.325Z Open on db.gcve.eu Reference links https://www.dahuasecurity.com/support/cybersecurity/details/957 http://seclists.org/fulldisclosure/2021/Oct/13 http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-9502`	not_vulnerable	2026-06-08 05:28:02.145259	Details available Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device. Published: 2020-05-13T15:21:12.000Z Updated: 2024-08-04T10:34:38.156Z Open on db.gcve.eu Reference links https://www.dahuasecurity.com/support/cybersecurity/details/777	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-9500`	not_vulnerable	2026-06-08 05:28:02.130687	Details available Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down. Published: 2020-04-09T13:21:01.000Z Updated: 2024-08-04T10:34:37.927Z Open on db.gcve.eu Reference links https://www.dahuasecurity.com/support/cybersecurity/details/727	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-9499`	not_vulnerable	2026-06-08 05:28:02.097816	Details available Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down. Published: 2020-04-09T13:19:23.000Z Updated: 2024-08-04T10:34:38.218Z Open on db.gcve.eu Reference links https://www.dahuasecurity.com/support/cybersecurity/details/727	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-9682`	not_vulnerable	2026-06-08 05:14:26.006809	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.