CVE-2020-9499

Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dahuasecurity:sd6al_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:sd6al:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dahuasecurity:sd5a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:sd5a:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dahuasecurity:sd1a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:sd1a:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:dahuasecurity:ptz1a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:ptz1a:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:dahuasecurity:sd50_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:sd50:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:dahuasecurity:sd52c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:sd52c:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:dahuasecurity:ipc-hx5842h_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:ipc-hx5842h:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:dahuasecurity:ipc-hx7842h_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:ipc-hx7842h:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:dahuasecurity:ipc-hx2xxx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:ipc-hx2xxx:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:dahuasecurity:ipc-hxxx5x4x_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:ipc-hxxx5x4x:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:dahuasecurity:n42b1p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n42b1p:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:dahuasecurity:n42b2p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n42b2p:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:dahuasecurity:n42b3p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n42b3p:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:dahuasecurity:n52a4p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n52a4p:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:dahuasecurity:n54a4p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahua:n54a4p:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:dahuasecurity:n52b2p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n52b2p:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:dahuasecurity:n52b5p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n52b5p:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:dahuasecurity:n52b3p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n52b3p:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:dahuasecurity:n54b2p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n54b2p:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-04-09 14:15

Updated : 2024-02-28 17:47


NVD link : CVE-2020-9499

Mitre link : CVE-2020-9499

CVE.ORG link : CVE-2020-9499


JSON object : View

Products Affected

dahuasecurity

  • sd50
  • n42b3p_firmware
  • sd5a
  • n54b2p
  • sd6al_firmware
  • ipc-hx5842h_firmware
  • ptz1a_firmware
  • n42b2p_firmware
  • n54a4p_firmware
  • n42b1p_firmware
  • ipc-hxxx5x4x_firmware
  • sd5a_firmware
  • sd52c_firmware
  • ptz1a
  • sd50_firmware
  • n52b2p
  • ipc-hx2xxx_firmware
  • n52b5p
  • n52b3p
  • n52b3p_firmware
  • n42b1p
  • n52a4p_firmware
  • sd52c
  • n54b2p_firmware
  • n52a4p
  • sd1a_firmware
  • n42b3p
  • n52b2p_firmware
  • sd1a
  • n42b2p
  • ipc-hx5842h
  • ipc-hx7842h
  • sd6al
  • ipc-hxxx5x4x
  • ipc-hx2xxx
  • ipc-hx7842h_firmware
  • n52b5p_firmware

dahua

  • n54a4p
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')