Ipc-hfw2x2x firmware

This hub aggregates every CVE we track for Ipc-hfw2x2x firmware, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 5 most recently published vulnerabilities affecting Ipc-hfw2x2x firmware.

• CVE-2019-9677The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC-HDW1...9.8Sep 18, 2019
• CVE-2019-9678Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X...7.5Sep 18, 2019
• CVE-2019-9680Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include...5.3Sep 18, 2019
• CVE-2019-9679Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,I...8.8Sep 18, 2019
• CVE-2019-9681Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products in...5.3Sep 17, 2019