High severity7.2NVD Advisory· Published Apr 9, 2020· Updated Jun 17, 2026
CVE-2020-9499
CVE-2020-9499
Description
Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down.
Affected products
21- Dahua/productsdescription
- cpe:2.3:o:dahuasecurity:ipc-hx5842h_firmware:*:*:*:*:*:*:*:*Range: <2019-12
- cpe:2.3:o:dahuasecurity:ipc-hx7842h_firmware:*:*:*:*:*:*:*:*Range: <2019-12
- cpe:2.3:o:dahuasecurity:ipc-hx2xxx_firmware:*:*:*:*:*:*:*:*Range: <2019-12
- cpe:2.3:o:dahuasecurity:ipc-hxxx5x4x_firmware:*:*:*:*:*:*:*:*Range: <2019-12
Patches
Vulnerability mechanics
References
1- www.dahuasecurity.com/support/cybersecurity/details/727nvdVendor Advisory
News mentions
0No linked articles in our index yet.