Dahua Vulnerability Could Cause Devices to Crash
CVE-2024-39948

7.5HIGH

Key Information:

Vendor

Dahua

Status
Nvr4xxx
Vendor
CVE Published:
31 July 2024

What is CVE-2024-39948?

A vulnerability exists in certain Dahua security devices that could allow an attacker to exploit the network interface. By sending specifically crafted data packets, an attacker may cause the affected device to crash, potentially impacting the functionality of critical surveillance solutions. This vulnerability necessitates immediate attention to ensure the security and availability of Dahua products.

Affected Version(s)

NVR4XXX NVR4XXX Versions which Build timeĀ before 2023/12/13

References

https://www.dahuasecurity.com/aboutUs/trustedCenter/detai...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.