CameraRisk

CVE-2019-9682

Dahua

Published
13 May 2020
Last modified
17 June 2026
CVSS
8.1 v3.1
Severity
high
EPSS
0.9% (56th pct)
CISA KEV
Not listed
NVD status
Modified
Weaknesses
CWE-276

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.

Exploitation

Not listed in the CISA Known Exploited Vulnerabilities catalogue as of 2026.09.04. That is an absence of confirmed public exploitation, not evidence that exploitation has not occurred. EPSS models a 0.9% probability of exploitation activity in the next 30 days.

Affected products

ProductVendorTypeVersions named
Ipc-hdbw1320e-w Dahua IP camera < 2019-12
Ipc-hx2xxx Dahua IP camera < 2019-12, <= 2021-7, >= 2017-7
Ipc-hx5842h Dahua IP camera < 2019-12
Ipc-hx7842h Dahua IP camera < 2019-12
Ipc-hxxx5x4x Dahua IP camera < 2019-12
N42B1P Dahua unknown < 2019-12
N42B2P Dahua unknown < 2019-12
N42B3P Dahua unknown < 2019-12
N52A4P Dahua unknown < 2019-12
N52B2P Dahua unknown < 2019-12
N52B3P Dahua unknown < 2019-12
N52B5P Dahua unknown < 2019-12
N54A4P Dahua unknown < 2019-12
N54B2P Dahua unknown < 2019-12
PTZ1A Dahua IP camera < 2019-12
SD1A Dahua unknown < 2019-12
SD50 Dahua unknown < 2.812.0000007.0.r.210706, < 2019-12, <= 2021-7, >= 2017-7
SD52C Dahua unknown < 2.812.0000007.0.r.210706, < 2019-12, <= 2021-7, >= 2017-7
SD5A Dahua unknown < 2019-12
SD6AL Dahua unknown < 2.812.0000007.0.r.210706, < 2019-12, <= 2021-7, >= 2017-7

References

Vendor advisory and patch

CVE-2019-9682 at NVD

Record assembled from NVD, CISA KEV 2026.09.04 and FIRST EPSS 2026-09-04. Affected products are those NVD's CPE configuration names that fall inside this site's scope; a CVE may affect products outside it.