Dahuasecurity Sd6al Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dahuasecurity Sd6al Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2020-9502 — CVSS 9.8 (critical): Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an…
• CVE-2021-33044 — CVSS 9.8 (critical) — actively exploited: The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device…
• CVE-2021-33046 — CVSS 9.8 (critical): Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through…
• CVE-2019-9682 — CVSS 8.1 (high): Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal…
• CVE-2020-9499 — CVSS 7.2 (high): Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific…
• CVE-2020-9500 — CVSS 4.9 (medium): Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a…