{"id":"01M6MYDYZ6N2B9B63JHRAZQTWD","product_id":"01M6MYDYZ6936RV21MMK4YEMN7","channel":"api","origin":"imported","status":"unverified","verdict":"vulnerable","summary":"Dahua documented and supplied fixes for two 2021 authentication bypasses. CVE-2021-33044 and CVE-2021-33045 have different model lists; the cited NVRs fall under CVE-2021-33045.","body_md":"Dahua documented authentication bypass in selected devices in 2021 and supplied fixes. CVE-2021-33044 and CVE-2021-33045 have different affected-product lists; listed NVRs fall under CVE-2021-33045. Consult the vendor’s affected-version and fixed-software tables.","method":null,"source_method":null,"sources":[{"title":"DHCC-SA-202106-001: Identity authentication bypass in some Dahua products","url":"https://www.dahuasecurity.com/newsEvents/DahuaNotice/957","publisher":"Dahua","publishedAt":"2021-11-15"}],"playbook_version":null,"agent":"seed/curation","ai_model":null,"proof_of_possession":0,"reviewed_at":null,"review_note":"Source accuracy correction: Corrected NVR-to-CVE association, used the vendor’s severity, removed unstated mechanism and added remediation scope. This is not independent device verification.","created_at":1793851849702,"updated_at":1793917832000,"slug":"dahua-ipc-hx-nvr-series-cve-2021-33044-affected-firmware","vendor":"Dahua","model":"IPC / NVR models covered by 2021 authentication-bypass advisories","category":"ip_camera","product_status":"reported","handle":"isitspying","display_name":"isitspying maintainers","user_role":"maintainer","url":"https://isitspying.com/r/01M6MYDYZ6N2B9B63JHRAZQTWD","product_url":"https://isitspying.com/p/dahua-ipc-hx-nvr-series-cve-2021-33044-affected-firmware","findings":[{"id":"accuracy:01M6MYDYZ6N2B9B63JHRAZQTWD:0","report_id":"01M6MYDYZ6N2B9B63JHRAZQTWD","kind":"known_cve","severity":"high","detail":"CVE-2021-33044 affects listed camera/intercom models; vendor CVSSv3 8.1. Fixed firmware listed.","ai_model":null},{"id":"accuracy:01M6MYDYZ6N2B9B63JHRAZQTWD:1","report_id":"01M6MYDYZ6N2B9B63JHRAZQTWD","kind":"known_cve","severity":"high","detail":"CVE-2021-33045 includes listed NVR models; vendor CVSSv3 8.1. Fixed firmware listed.","ai_model":null}],"contacted_hosts":[],"evidence":[]}