CVE-2021-33044
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
Actively exploited
- In the CISA exploited-vulnerabilities catalogue since Aug 21, 2024
- US federal agencies must remediate it by Sep 11, 2024 (BOD 22-01)
- First attack observed 810 days after disclosure
- Confirmed by sensors, not only by reports
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Source: CISA KEV · Sep 14, 2026 Sep 13, 2026 Sep 12, 2026 Sep 11, 2026 Sep 10, 2026 Sep 9, 2026
CVSS score9.8 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness type (CWE)CWE-287, CWE-287
Vendorsdahuasecurity
Affected products
| Vendors | Product | Versions |
|---|---|---|
| dahuasecurity | ipc-hum7xxx firmware | < 2.820.0000000.5.r.210705 |
| dahuasecurity | ipc-hum7xxx | - |
| dahuasecurity | ipc-hx3xxx firmware | < 2.800.0000000.29.r.210630 |
| dahuasecurity | ipc-hx3xxx | - |
| dahuasecurity | ipc-hx5xxx firmware | < 2.820.0000000.18.r.210705 |
| dahuasecurity | ipc-hx5xxx | - |
| dahuasecurity | sd1a1 firmware | < 2.812.0000007.0.r.210706 |
| dahuasecurity | sd1a1 | - |
| dahuasecurity | sd22 firmware | < 2.812.0000007.0.r.210706 |
| dahuasecurity | sd22 | - |
| dahuasecurity | sd49 firmware | < 2.812.0000007.0.r.210706 |
| dahuasecurity | sd49 | - |
| dahuasecurity | sd50 firmware | < 2.812.0000007.0.r.210706 |
| dahuasecurity | sd50 | - |
| dahuasecurity | sd52c firmware | < 2.812.0000007.0.r.210706 |
| dahuasecurity | sd52c | - |
| dahuasecurity | sd6al firmware | < 2.812.0000007.0.r.210706 |
| dahuasecurity | sd6al | - |
| dahuasecurity | tpc-bf1241 firmware | < 2.630.0000000.6.r.210707 |
| dahuasecurity | tpc-bf1241 | - |
| dahuasecurity | tpc-bf2221 firmware | < 2.630.0000000.10.r.210707 |
| dahuasecurity | tpc-bf2221 | - |
| dahuasecurity | tpc-bf5x01 firmware | < 2.630.0000000.12.r.210707 |
| dahuasecurity | tpc-bf5x01 | - |
| dahuasecurity | tpc-pt8x21b firmware | < 2.630.0000000.10.r.210701 |
Related articles
This product uses the NVD API but is not endorsed or certified by the NVD.