Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras

Risk Summary

ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.

CVEs (2)

Remediations

• Dahua has released updated firmware to mitigate these vulnerabilities.
• Updated software can be obtained from Dahua technical support or an authorized Dahua distributor.
• In addition, Dahua released the following security notifications for users:
• Cyber Vulnerability Affecting Certain Dahua IP Cameras and Recorders (March 6)
• Cybersecurity Statement - March 6, 2017
• Cybersecurity Vulnerability Update - March 8, 2017
• Cyber Vulnerability Affecting Certain Dahua IP Cameras and Recorders (April 3)
• Dahua's original notification specifies 11 affected models, but after initial testing, Dahua has identified additional series and models in the following security notification:
• Security Notification DHCC-201703-01

Affected Vendors

Affected Products (15)