Critical severity9.8NVD Advisory· Published Jan 13, 2022· Updated Jun 17, 2026
CVE-2021-33046
CVE-2021-33046
Description
Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.
Affected products
30- cpe:2.3:o:dahuasecurity:asc2204c_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:hcvr7xxx_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:hcvr8xxx_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:ipc-hx1xxx_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:ipc-hx2xxx_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:ipc-hx3xxx_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:ipc-hx5\(4\)\(3\)xxx_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:ipc-hx5xxx_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:nvr1xxx_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:nvr2xxx_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:nvr4xxx_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:nvr5xxx_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:sd1a1_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:sd22_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:sd49_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:sd50_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:sd52c_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:sd6al_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:tpc-bf1241_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:tpc-bf2221_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:tpc-bf5x01_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:tpc-pt8x21x_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:tpc-sd2221_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:tpc-sd8x21_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:vtox20xf_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:xvr4xxx_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:xvr5xxx_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
- cpe:2.3:o:dahuasecurity:xvr7xxx_firmware:*:*:*:*:*:*:*:*Range: >=2017-7,<=2021-7
Patches
Vulnerability mechanics
References
3- support.dahuatech.com/networkSecurity/securityDetailsnvdVendor Advisory
- www.dahuasecurity.com/support/cybersecurity/details/987nvdVendor Advisory
- www.dahuasecurity.com/support/cybersecurity/details/957nvdNot Applicable
News mentions
0No linked articles in our index yet.