CVE-2019-9681

Online upgrade information in some firmware packages of Dahua products is not encrypted

published September 17, 2019

CVSS
—
EPSS
1%
Percentile
55.6
In the wild
Unconfirmed
What it is

Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00784 · 55.6th percentile
Published
2019-09-17T16:02Z
EPSS history
Timeline
  • 17 SEP 16:02Z
    Online upgrade information in some firmware packages of Dahua products is not encrypted
    cvelistv5