Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2021-33044 Details

Description

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNA: CISA-ADPCVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-33044	CISA-ADP	US Government Resource
http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html	CVE	ExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2021/Oct/13	CVE	ExploitMailing ListThird Party Advisory
https://www.dahuasecurity.com/support/cybersecurity/details/957	CVE	Vendor Advisory
http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html	[email protected]	ExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2021/Oct/13	[email protected]	ExploitMailing ListThird Party Advisory
https://www.dahuasecurity.com/support/cybersecurity/details/957	[email protected]	Vendor Advisory

see all 7 references

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability Name	Date Added	Due Date	Required Action
Dahua IP Camera Authentication Bypass Vulnerability	Aug 21, 2024	Sep 11, 2024	Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-287	Improper Authentication	[email protected]
CWE-287	Improper Authentication	CISA-ADP

Affected Products

Product	Versions
dahuasecurity ipc-hum7xxx firmware	< 2.820.0000000.5.r.210705
CPE cpe:2.3:o:dahuasecurity:ipc-hum7xxx_firmware:::::::: Remediation No remediation found in references.
dahuasecurity ipc-hum7xxx	All versions
CPE cpe:2.3:h:dahuasecurity:ipc-hum7xxx:-:::::::* Remediation No remediation found in references.
dahuasecurity ipc-hx3xxx firmware	< 2.800.0000000.29.r.210630
CPE cpe:2.3:o:dahuasecurity:ipc-hx3xxx_firmware:::::::: Remediation No remediation found in references.
dahuasecurity ipc-hx3xxx	All versions
CPE cpe:2.3:h:dahuasecurity:ipc-hx3xxx:-:::::::* Remediation No remediation found in references.
dahuasecurity ipc-hx5xxx firmware	< 2.820.0000000.18.r.210705
CPE cpe:2.3:o:dahuasecurity:ipc-hx5xxx_firmware:::::::: Remediation No remediation found in references.
dahuasecurity ipc-hx5xxx	All versions
CPE cpe:2.3:h:dahuasecurity:ipc-hx5xxx:-:::::::* Remediation No remediation found in references.
dahuasecurity sd1a1 firmware	< 2.812.0000007.0.r.210706
CPE cpe:2.3:o:dahuasecurity:sd1a1_firmware:::::::: Remediation No remediation found in references.
dahuasecurity sd1a1	All versions
CPE cpe:2.3:h:dahuasecurity:sd1a1:-:::::::* Remediation No remediation found in references.
dahuasecurity sd22 firmware	< 2.812.0000007.0.r.210706
CPE cpe:2.3:o:dahuasecurity:sd22_firmware:::::::: Remediation No remediation found in references.
dahuasecurity sd22	All versions
CPE cpe:2.3:h:dahuasecurity:sd22:-:::::::* Remediation No remediation found in references.
dahuasecurity sd49 firmware	< 2.812.0000007.0.r.210706
CPE cpe:2.3:o:dahuasecurity:sd49_firmware:::::::: Remediation No remediation found in references.
dahuasecurity sd49	All versions
CPE cpe:2.3:h:dahuasecurity:sd49:-:::::::* Remediation No remediation found in references.
dahuasecurity sd50 firmware	< 2.812.0000007.0.r.210706
CPE cpe:2.3:o:dahuasecurity:sd50_firmware:::::::: Remediation No remediation found in references.
dahuasecurity sd50	All versions
CPE cpe:2.3:h:dahuasecurity:sd50:-:::::::* Remediation No remediation found in references.
dahuasecurity sd52c firmware	< 2.812.0000007.0.r.210706
CPE cpe:2.3:o:dahuasecurity:sd52c_firmware:::::::: Remediation No remediation found in references.
dahuasecurity sd52c	All versions
CPE cpe:2.3:h:dahuasecurity:sd52c:-:::::::* Remediation No remediation found in references.
dahuasecurity sd6al firmware	< 2.812.0000007.0.r.210706
CPE cpe:2.3:o:dahuasecurity:sd6al_firmware:::::::: Remediation No remediation found in references.
dahuasecurity sd6al	All versions
CPE cpe:2.3:h:dahuasecurity:sd6al:-:::::::* Remediation No remediation found in references.
dahuasecurity tpc-bf1241 firmware	< 2.630.0000000.6.r.210707
CPE cpe:2.3:o:dahuasecurity:tpc-bf1241_firmware:::::::: Remediation No remediation found in references.
dahuasecurity tpc-bf1241	All versions
CPE cpe:2.3:h:dahuasecurity:tpc-bf1241:-:::::::* Remediation No remediation found in references.
dahuasecurity tpc-bf2221 firmware	< 2.630.0000000.10.r.210707
CPE cpe:2.3:o:dahuasecurity:tpc-bf2221_firmware:::::::: Remediation No remediation found in references.
dahuasecurity tpc-bf2221	All versions
CPE cpe:2.3:h:dahuasecurity:tpc-bf2221:-:::::::* Remediation No remediation found in references.
dahuasecurity tpc-bf5x01 firmware	< 2.630.0000000.12.r.210707
CPE cpe:2.3:o:dahuasecurity:tpc-bf5x01_firmware:::::::: Remediation No remediation found in references.
dahuasecurity tpc-bf5x01	All versions
CPE cpe:2.3:h:dahuasecurity:tpc-bf5x01:-:::::::* Remediation No remediation found in references.
dahuasecurity tpc-pt8x21b firmware	< 2.630.0000000.10.r.210701
CPE cpe:2.3:o:dahuasecurity:tpc-pt8x21b_firmware:::::::: Remediation No remediation found in references.
dahuasecurity tpc-pt8x21b	All versions
CPE cpe:2.3:h:dahuasecurity:tpc-pt8x21b:-:::::::* Remediation No remediation found in references.
dahuasecurity tpc-sd2221 firmware	<= 2.630.0000000.7.r.210707
CPE cpe:2.3:o:dahuasecurity:tpc-sd2221_firmware:::::::: Remediation No remediation found in references.
dahuasecurity tpc-sd2221	All versions
CPE cpe:2.3:h:dahuasecurity:tpc-sd2221:-:::::::* Remediation No remediation found in references.
dahuasecurity tpc-sd8x21 firmware	< 2.630.0000000.9.r.210706
CPE cpe:2.3:o:dahuasecurity:tpc-sd8x21_firmware:::::::: Remediation No remediation found in references.
dahuasecurity tpc-sd8x21	All versions
CPE cpe:2.3:h:dahuasecurity:tpc-sd8x21:-:::::::* Remediation No remediation found in references.
dahuasecurity vto-65xxx firmware	< 4.300.0000004.0.r.210715
CPE cpe:2.3:o:dahuasecurity:vto-65xxx_firmware:::::::: Remediation No remediation found in references.
dahuasecurity vto-65xxx	All versions
CPE cpe:2.3:h:dahuasecurity:vto-65xxx:-:::::::* Remediation No remediation found in references.
dahuasecurity vto-75x95x firmware	< 4.300.0000003.0.r.210714
CPE cpe:2.3:o:dahuasecurity:vto-75x95x_firmware:::::::: Remediation No remediation found in references.
dahuasecurity vto-75x95x	All versions
CPE cpe:2.3:h:dahuasecurity:vto-75x95x:-:::::::* Remediation No remediation found in references.
dahuasecurity vth-542xh firmware	< 4.500.0000002.0.r.210715
CPE cpe:2.3:o:dahuasecurity:vth-542xh_firmware:::::::: Remediation No remediation found in references.
dahuasecurity vth-542xh	All versions
CPE cpe:2.3:h:dahuasecurity:vth-542xh:-:::::::* Remediation No remediation found in references.
dahuasecurity tpc-bf5x21 firmware	< 2.630.0000000.8.r.210630
CPE cpe:2.3:o:dahuasecurity:tpc-bf5x21_firmware:::::::: Remediation No remediation found in references.
dahuasecurity tpc-bf5x21	All versions
CPE cpe:2.3:h:dahuasecurity:tpc-bf5x21:-:::::::* Remediation No remediation found in references.

Change History

16 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Jan 13, 2026	Modified Analysis	[email protected]
Jan 12, 2026	CVE Modified	CISA-ADP
Nov 10, 2025	Modified Analysis	[email protected]
Oct 22, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Feb 24, 2025	Modified Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Aug 22, 2024	CVE CISA KEV Update	Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government
May 14, 2024	CVE Modified	[email protected]
Dec 2, 2021	Modified Analysis	[email protected]
Oct 6, 2021	CVE Modified	[email protected]
Oct 6, 2021	CVE Modified	[email protected]
Sep 30, 2021	Initial Analysis	[email protected]

CVE-2021-33044 Details

Description

Metrics

References to Advisories, Solutions, and Tools

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE