description: Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.
problem types: Access control
affected:
{
product: Access control vulnerability found in some Dahua products
vendor: n/a
versions:
status: affected, version: Dahua IP Camera devices IPC-HX3XXX, and IPC-HX5XXX
status: affected, version: PTZ Dome Camera SD1A1, SD22, SD49, SD50, SD52C, and SD6AL
status: affected, version: Thermal TPC-BF1241,TPC-BF2221, TPC-SD2221
status: affected, version: VTO2101E, VTOX221E, and ASC2204C devices Buildtime between 2017/7 ~ 2021/7.  NVR devices NVR4XXX, and NVR5XXX
status: affected, version: XVR devices XVR4XXX, and XVR5XXX
status: affected, version: HCVR devices HCVR7XXX, and HCVR8XXX devices Buildtime between 2017/1 ~ 2021/7.
}