CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Dahua IP Camera and NVR Authentication Bypass Vulnerability (CVE-2021-33045) Security Advisory
[Affected Scope] Certain Dahua IP cameras, NVRs, XVRs, and thermal cameras
[Impact] Attackers can bypass identity authentication during the login process by sending crafted malicious packets, gaining full administrative control
[Mitigation] Immediately apply the latest firmware updates from the vendor and restrict direct internet access to the devices
Dahua IP Camera and NVR/DVR Authentication Bypass Vulnerability (CVE-2021-33044) Security Advisory
[Affected Scope] Certain Dahua IP cameras, NVRs, DVRs, and associated firmware versions
[Impact] Attackers can completely bypass the identity authentication process during login and gain full administrative control of the device
[Mitigation] Immediately apply the latest firmware updates provided by the vendor and restrict external network access to the devices
NUUO NVRmini Remote Command Execution Vulnerability Analysis and Mitigation Guide (CVE-2018-14933)
[Affected Scope] NUUO NVRmini network video recorder devices
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending crafted HTTP requests
[Mitigation] Apply the latest firmware updates, restrict external internet access to the management interface, and implement firewall rules