Vulnerability Details CVE-2020-9499
Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.5%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 6.5
Products affected by CVE-2020-9499
-
-
cpe:2.3:h:dahuasecurity:ipc-hx2xxx:-
-
cpe:2.3:h:dahuasecurity:ipc-hx5842h:-
-
cpe:2.3:h:dahuasecurity:ipc-hx7842h:-
-
cpe:2.3:h:dahuasecurity:ipc-hxxx5x4x:-
-
cpe:2.3:h:dahuasecurity:n42b1p:-
-
cpe:2.3:h:dahuasecurity:n42b2p:-
-
cpe:2.3:h:dahuasecurity:n42b3p:-
-
cpe:2.3:h:dahuasecurity:n52a4p:-
-
cpe:2.3:h:dahuasecurity:n52b2p:-
-
cpe:2.3:h:dahuasecurity:n52b3p:-
-
cpe:2.3:h:dahuasecurity:n52b5p:-
-
cpe:2.3:h:dahuasecurity:n54b2p:-
-
cpe:2.3:h:dahuasecurity:ptz1a:-
-
cpe:2.3:h:dahuasecurity:sd1a:-
-
cpe:2.3:h:dahuasecurity:sd50:-
-
cpe:2.3:h:dahuasecurity:sd52c:-
-
cpe:2.3:h:dahuasecurity:sd5a:-
-
cpe:2.3:h:dahuasecurity:sd6al:-
-
cpe:2.3:o:dahuasecurity:ipc-hx2xxx_firmware:-
-
cpe:2.3:o:dahuasecurity:ipc-hx5842h_firmware:-
-
cpe:2.3:o:dahuasecurity:ipc-hx7842h_firmware:-
-
cpe:2.3:o:dahuasecurity:ipc-hxxx5x4x_firmware:-
-
cpe:2.3:o:dahuasecurity:n42b1p_firmware:-
-
cpe:2.3:o:dahuasecurity:n42b2p_firmware:-
-
cpe:2.3:o:dahuasecurity:n42b3p_firmware:-
-
cpe:2.3:o:dahuasecurity:n52a4p_firmware:-
-
cpe:2.3:o:dahuasecurity:n52b2p_firmware:-
-
cpe:2.3:o:dahuasecurity:n52b3p_firmware:-
-
cpe:2.3:o:dahuasecurity:n52b5p_firmware:-
-
cpe:2.3:o:dahuasecurity:n54a4p_firmware:-
-
cpe:2.3:o:dahuasecurity:n54b2p_firmware:-
-
cpe:2.3:o:dahuasecurity:ptz1a_firmware:*
-
cpe:2.3:o:dahuasecurity:sd1a_firmware:*
-
cpe:2.3:o:dahuasecurity:sd50_firmware:*
-
cpe:2.3:o:dahuasecurity:sd52c_firmware:*
-
cpe:2.3:o:dahuasecurity:sd5a_firmware:*
-
cpe:2.3:o:dahuasecurity:sd6al_firmware:*