Vulnerability Details CVE-2020-9502
Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.9%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2020-9502
-
cpe:2.3:h:dahuasecurity:ipc-hdbw1320e-w:-
-
cpe:2.3:h:dahuasecurity:ipc-hx2xxx:-
-
cpe:2.3:h:dahuasecurity:ipc-hx5842h:-
-
cpe:2.3:h:dahuasecurity:ipc-hx7842h:-
-
cpe:2.3:h:dahuasecurity:ipc-hxxx5x4x:-
-
cpe:2.3:h:dahuasecurity:n42b1p:-
-
cpe:2.3:h:dahuasecurity:n42b2p:-
-
cpe:2.3:h:dahuasecurity:n42b3p:-
-
cpe:2.3:h:dahuasecurity:n52a4p:-
-
cpe:2.3:h:dahuasecurity:n52b2p:-
-
cpe:2.3:h:dahuasecurity:n52b3p:-
-
cpe:2.3:h:dahuasecurity:n52b5p:-
-
cpe:2.3:h:dahuasecurity:n54a4p:-
-
cpe:2.3:h:dahuasecurity:n54b2p:-
-
cpe:2.3:h:dahuasecurity:ptz1a:-
-
cpe:2.3:h:dahuasecurity:sd1a:-
-
cpe:2.3:h:dahuasecurity:sd50:-
-
cpe:2.3:h:dahuasecurity:sd52c:-
-
cpe:2.3:h:dahuasecurity:sd5a:-
-
cpe:2.3:h:dahuasecurity:sd6al:-
-
cpe:2.3:o:dahuasecurity:ipc-hdbw1320e-w_firmware:*
-
cpe:2.3:o:dahuasecurity:ipc-hx2xxx_firmware:-
-
cpe:2.3:o:dahuasecurity:ipc-hx5842h_firmware:-
-
cpe:2.3:o:dahuasecurity:ipc-hx7842h_firmware:-
-
cpe:2.3:o:dahuasecurity:ipc-hxxx5x4x_firmware:-
-
cpe:2.3:o:dahuasecurity:n42b1p_firmware:-
-
cpe:2.3:o:dahuasecurity:n42b2p_firmware:-
-
cpe:2.3:o:dahuasecurity:n42b3p_firmware:-
-
cpe:2.3:o:dahuasecurity:n52a4p_firmware:-
-
cpe:2.3:o:dahuasecurity:n52b2p_firmware:-
-
cpe:2.3:o:dahuasecurity:n52b3p_firmware:-
-
cpe:2.3:o:dahuasecurity:n52b5p_firmware:-
-
cpe:2.3:o:dahuasecurity:n54a4p_firmware:-
-
cpe:2.3:o:dahuasecurity:n54b2p_firmware:-
-
cpe:2.3:o:dahuasecurity:ptz1a_firmware:*
-
cpe:2.3:o:dahuasecurity:sd1a_firmware:*
-
cpe:2.3:o:dahuasecurity:sd50_firmware:*
-
cpe:2.3:o:dahuasecurity:sd52c_firmware:*
-
cpe:2.3:o:dahuasecurity:sd5a_firmware:*
-
cpe:2.3:o:dahuasecurity:sd6al_firmware:*