Detections
Analytics
CVE-2021-33045
critical
Description
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
References
https://www.securityweek.com/threat-actor-hacks-14000-ip-cameras-in-ukraine-and-russia/
https://thehackernews.com/2026/08/hackers-compromised-14500-dahua-devices.html
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-317a
https://www.theregister.com/2024/09/05/uncle_sam_charges_russian_gru/
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-249a
https://github.com/0x5477/Ingram-Pro
https://github.com/litndat/Camera-Dahua-Research-l-h-ng-CVE-2021-33044
https://github.com/Bd-Mutant7/DahuaLoginBypass
https://github.com/eagle-nett/DAHUA_AUTH-BYPASS-CVE-2021-33044
https://github.com/umair-aziz025/dahua-cve-research
https://github.com/lequoca/Camera-Dahua-CVE-2021-33045
https://github.com/Alonzozzz/alonzzzo
https://github.com/bp2008/DahuaLoginBypass
https://www.dahuasecurity.com/support/cybersecurity/details/957
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-33045
http://seclists.org/fulldisclosure/2021/Oct/13
http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html