KEVIntel
Back to KEVs
9.8
CVSS
Critical

CVE-2021-33045

PUBLISHED

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity...

Exploited in the wild Remote Low complexity No user interaction
Vendor
Dahua
Product
Some Dahua IP Camera, Video Intercom, NVR, XVR devices
Published
Sep 15, 2021
EPSS
—

Description

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

cisa nuclei_scanner nessus_scanner

CVSS scores

CVSS v3.1 9.8 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 10.0

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitation status

Exploited in the wild

Recorded 2024-08-21 00:00:00 UTC · Source

SSVC decision points

Exploitation
active
Automatable
Yes
Technical impact
total

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
CISA Aug 21, 2024

Scanner integrations

Scanner Reference Detected
Nuclei https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33045.yaml Jun 01, 2026
Nessus https://www.tenable.com/plugins/nessus/502338 Jun 02, 2025

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel

  • Detected by Nessus

  • Detected by Nuclei