Critical severity9.8CISA KEVNVD Advisory· Published Sep 15, 2021· Updated Jun 17, 2026
CVE-2021-33045
CVE-2021-33045
Description
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21- cpe:2.3:o:dahuasecurity:ipc-hum7xxx_firmware:*:*:*:*:*:*:*:*Range: <2.820.0000000.5.r.210705
- cpe:2.3:o:dahuasecurity:ipc-hx3xxx_firmware:*:*:*:*:*:*:*:*Range: <2.800.0000000.29.r.210630
- cpe:2.3:o:dahuasecurity:ipc-hx5xxx_firmware:*:*:*:*:*:*:*:*Range: <2.820.0000000.5.r.210705
- cpe:2.3:o:dahuasecurity:nvr-1xxx_firmware:*:*:*:*:*:*:*:*Range: <4.001.0000005.1.r.210709
- cpe:2.3:o:dahuasecurity:nvr-2xxx_firmware:*:*:*:*:*:*:*:*Range: <4.001.0000000.1.r.210710
- cpe:2.3:o:dahuasecurity:nvr-4xxx_firmware:*:*:*:*:*:*:*:*Range: <4.001.0000005.1.r.210713
- cpe:2.3:o:dahuasecurity:nvr-5xxx_firmware:*:*:*:*:*:*:*:*Range: <4.001.0000000.0.r.210710
- cpe:2.3:o:dahuasecurity:nvr-6xx_firmware:*:*:*:*:*:*:*:*Range: <4.001.0000001.1.r.210716
- cpe:2.3:o:dahuasecurity:vth-542xh_firmware:*:*:*:*:*:*:*:*Range: <4.500.0000002.0.r.210715
- cpe:2.3:o:dahuasecurity:vto-65xxx_firmware:*:*:*:*:*:*:*:*Range: <4.300.0000004.0.r.210715
- cpe:2.3:o:dahuasecurity:vto-75x95x_firmware:*:*:*:*:*:*:*:*Range: <4.300.0000003.0.r.210714
cpe:2.3:o:dahuasecurity:xvr-4x04_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:dahuasecurity:xvr-4x04_firmware:*:*:*:*:*:*:*:*range: <4.001.0000001.1.r.210709
- cpe:2.3:o:dahuasecurity:xvr-4x04_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:dahuasecurity:xvr-4x08_firmware:*:*:*:*:*:*:*:*Range: <4.001.0000001.1.r.210709
- cpe:2.3:o:dahuasecurity:xvr-5x04_firmware:*:*:*:*:*:*:*:*Range: <4.001.0000003.1.r.210710
- cpe:2.3:o:dahuasecurity:xvr-5x08_firmware:*:*:*:*:*:*:*:*Range: <4.001.0000003.1.r.210710
- cpe:2.3:o:dahuasecurity:xvr-5x16_firmware:*:*:*:*:*:*:*:*Range: <4.001.0000003.1.r.210710
- cpe:2.3:o:dahuasecurity:xvr-7x16_firmware:*:*:*:*:*:*:*:*Range: <4.001.0000003.1.r.210710
- cpe:2.3:o:dahuasecurity:xvr-7x32_firmware:*:*:*:*:*:*:*:*Range: <4.001.0000003.1.r.210710
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2021/Oct/13nvdExploitMailing ListThird Party Advisory
- www.dahuasecurity.com/support/cybersecurity/details/957nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.