CVE-2024-39946

A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing device initialization.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L
dahuaCNA
6 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
VendorProductVersion
dahuasecuritynvr4104-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4108-4ks2\/l_firmware
4.003.0000000.1.r.240515:r.240515
dahuasecuritynvr4116-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4104-p-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4108-p-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4108-8p-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4116-8p-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4104hs-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4108hs-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4104hs-p-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4108hs-p-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4108hs-8p-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4116hs-8p-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4204-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4208-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4216-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4204-p-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4208-8p-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4216-16p-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4232-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4232-16p-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4116hs-4ks2\/l_firmware
𝑥
< 4.003.0000000.1.r.240515
dahuasecuritynvr4416-4ks2\/i_firmware
𝑥
< 4.001.0000001.6.r.240725
dahuasecuritynvr4416-16p-4ks2\/i_firmware
𝑥
< 4.001.0000001.6.r.240725
dahuasecuritynvr4432-16p-4ks2\/i_firmware
𝑥
< 4.001.0000001.6.r.240725
dahuasecuritynvr4816-4ks2\/i_firmware
𝑥
< 4.001.0000001.6.r.240725
dahuasecuritynvr4816-16p-4ks2\/i_firmware
𝑥
< 4.001.0000001.6.r.240725
dahuasecuritynvr4832-4ks2\/i_firmware
𝑥
< 4.001.0000001.6.r.240725
dahuasecuritynvr4832-16p-4ks2\/i_firmware
𝑥
< 4.001.0000001.6.r.240725
dahuasecuritynvr4432-4ks2\/i_firmware
𝑥
< 4.001.0000001.6.r.240725
dahuasecuritynvr4232-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4232-16p-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4216-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4216-16p-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4208-8p-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4208-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4204-p-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4204-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4116hs-8p-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4116hs-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4108hs-p-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4108hs-8p-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4108hs-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4104hs-p-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4104hs-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4116-8p-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4116-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4108-p-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4104-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4108-8p-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4108-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4104-p-4ks3_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4104hs-p-4ks3\(960g\)_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4104hs-4ks3\(960g\)_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4108hs-4ks3\(960g\)_firmware
𝑥
< 4.003.0000000.0.r.240312
dahuasecuritynvr4104-p-4ks3\(960g\)_firmware
𝑥
< 4.003.0000000.0.r.240312
𝑥
= Vulnerable software versions
References
https://www.dahuasecurity.com/aboutUs/trustedCenter/details/768