CVE-2020-9502
Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cybersecurity@dahuatech.com
- Published
- 2020-05-13
- Last modified
- 2024-08-04
- Weaknesses
- CWE-330
Affected products
- Ipc-hdbw1320e-w Firmware (Dahuasecurity)
- Ipc-hx2xxx Firmware (Dahuasecurity)
- Ipc-hx5842h Firmware (Dahuasecurity)
- Ipc-hx7842h Firmware (Dahuasecurity)
- Ipc-hxxx5x4x Firmware (Dahuasecurity)
- N42b1p Firmware (Dahuasecurity)
- N42b2p Firmware (Dahuasecurity)
- N42b3p Firmware (Dahuasecurity)
- N52a4p Firmware (Dahuasecurity)
- N52b2p Firmware (Dahuasecurity)
- N52b3p Firmware (Dahuasecurity)
- N52b5p Firmware (Dahuasecurity)
- N54a4p Firmware (Dahuasecurity)
- N54b2p Firmware (Dahuasecurity)
- Ptz1a Firmware (Dahuasecurity)
- Sd1a Firmware (Dahuasecurity)
- Sd50 Firmware (Dahuasecurity)
- Sd52c Firmware (Dahuasecurity)
- Sd5a Firmware (Dahuasecurity)
- Sd6al Firmware (Dahuasecurity)
References
- https://www.dahuasecurity.com/support/cybersecurity/details/777
