CVE-2021-33046
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Access control vulnerability found in some Dahua products
- Vendor
- n/a
- Product
- Access control vulnerability found in some Dahua products
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Dahua IP Camera devices IPC-HX3XXX, and IPC-HX5XXX | affected | Unavailable | Unavailable | Unavailable | None listed |
| PTZ Dome Camera SD1A1, SD22, SD49, SD50, SD52C, and SD6AL | affected | Unavailable | Unavailable | Unavailable | None listed |
| Thermal TPC-BF1241,TPC-BF2221, TPC-SD2221 | affected | Unavailable | Unavailable | Unavailable | None listed |
| VTO2101E, VTOX221E, and ASC2204C devices Buildtime between 2017/7 ~ 2021/7. NVR devices NVR4XXX, and NVR5XXX | affected | Unavailable | Unavailable | Unavailable | None listed |
| XVR devices XVR4XXX, and XVR5XXX | affected | Unavailable | Unavailable | Unavailable | None listed |
| HCVR devices HCVR7XXX, and HCVR8XXX devices Buildtime between 2017/1 ~ 2021/7. | affected | Unavailable | Unavailable | Unavailable | None listed |