Critical severity9.8NVD Advisory· Published May 13, 2020· Updated Jun 17, 2026
CVE-2020-9502
CVE-2020-9502
Description
Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device.
Affected products
22- cpe:2.3:o:dahuasecurity:ipc-hdbw1320e-w_firmware:*:*:*:*:*:*:*:*Range: <2019-12
- cpe:2.3:o:dahuasecurity:ipc-hx2xxx_firmware:*:*:*:*:*:*:*:*Range: <2019-12
- cpe:2.3:o:dahuasecurity:ipc-hx5842h_firmware:*:*:*:*:*:*:*:*Range: <2019-12
- cpe:2.3:o:dahuasecurity:ipc-hx7842h_firmware:*:*:*:*:*:*:*:*Range: <2019-12
- cpe:2.3:o:dahuasecurity:ipc-hxxx5x4x_firmware:*:*:*:*:*:*:*:*Range: <2019-12
- Dahua/Dahua productsdescription
- Range: < December 2019
Patches
Vulnerability mechanics
References
1- www.dahuasecurity.com/support/cybersecurity/details/777nvdVendor Advisory
News mentions
0No linked articles in our index yet.