CVE-2020-9501

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways

published May 13, 2020

CVSS
—
EPSS
0%
Percentile
25.6
In the wild
Unconfirmed
What it is

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in additional consumption of platform server resources. Versions with Build time before April 2020 are affected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00335 · 25.6th percentile
Published
2020-05-13T15:17Z
EPSS history
Timeline
  • 13 MAY 15:17Z
    Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways
    cvelistv5