CVE-2024-39945

Medium

A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attacker can send a…

dahua·NVD-CWE-noinfo·Published 2024-07-31

CVSS

4.9

EPSS

0.00

KEV

Exploits

cve.orgen

231 chars

A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device to crash.

NVDen

231 chars

NVDes

280 chars

Se ha encontrado una vulnerabilidad en los productos Dahua. Después de obtener el nombre de usuario y la contraseña del administrador, el atacante puede enviar un paquete de datos cuidadosamente manipulado a la interfaz con vulnerabilidades, provocando que el dispositivo falle.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	4.9	1.2	3.6	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
3.1	Primary	cve.org	4.9	—	—	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	NVD	4.9	1.2	3.6	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H