CVE Program partner

dahua

Dahua Technologies

API
CVEs, 365 days457 all time, 8 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationDahua Technologies
RoleCNA
TypeVendor
Reports tomitre
ScopeDahua consumer Internet of Things (IoT) products, excludes End-of-Life products.
Advisorieshttps://www.dahuasecurity.com/aboutUs/trustedCenter/trustworthy

Latest CVEs · RSS

  • CVE-2026-29116 2026-06-10 · CVSS 8.7
    A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, triggering an exception
  • CVE-2026-29115 2026-06-10 · CVSS 6.9
    A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially crafted packet, triggering an exception t
  • CVE-2026-29114 2026-06-10 · CVSS 2.3
    A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client sy
  • CVE-2025-31703 2026-03-18 · CVSS 2.4
    A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the
  • CVE-2025-31702 2025-10-15 · CVSS 6.8
    A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability
  • CVE-2025-31701 2025-07-23 · CVSS 8.1
    A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, poten
  • CVE-2025-31700 2025-07-23 · CVSS 8.1
    A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, poten
  • CVE-2024-39950 2024-07-31 · CVSS 8.6
    A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device ini
  • CVE-2024-39949 2024-07-31 · CVSS 7.5
    A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to
  • CVE-2024-39948 2024-07-31 · CVSS 7.5
    A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to
  • CVE-2024-39947 2024-07-31 · CVSS 6.5
    A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packe
  • CVE-2024-39946 2024-07-31 · CVSS 6.0
    A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packe
  • CVE-2024-39945 2024-07-31 · CVSS 4.9
    A vulnerability has been found in Dahua products.  After obtaining the administrator's username and password, the attacker can send a carefully crafted data pac
  • CVE-2024-39944 2024-07-31 · CVSS 7.5
    A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to
  • CVE-2022-30564 2023-02-09
    Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp. By sending a specially crafted packet to the vulnerable
  • CVE-2022-45433 2022-12-27
    Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy,
  • CVE-2022-45423 2022-12-27
    Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials. An attacker can obtain encrypted MQTT credentials by sending a
  • CVE-2022-45424 2022-12-27
    Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key. An attacker can obtain the AES crypto key by sending a specific
  • CVE-2022-45425 2022-12-27
    Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the AES crypto key by exploiting this vulnera
  • CVE-2022-45426 2022-12-27
    Some Dahua software products have a vulnerability of unrestricted download of file. After obtaining the permissions of ordinary users, by sending a specific cra
  • CVE-2022-45427 2022-12-27
    Some Dahua software products have a vulnerability of unrestricted upload of file. After obtaining the permissions of administrators, by sending a specific craft
  • CVE-2022-45428 2022-12-27
    Some Dahua software products have a vulnerability of sensitive information leakage. After obtaining the permissions of administrators, by sending a specific cra
  • CVE-2022-45429 2022-12-27
    Some Dahua software products have a vulnerability of server-side request forgery (SSRF). An Attacker can access internal resources by concatenating links (URL)
  • CVE-2022-45430 2022-12-27
    Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD service. After bypassing the firewall access control policy, by send
  • CVE-2022-45431 2022-12-27
    Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server. After bypassing the firewall access control policy, by sendin

All CVE Program partners