CVE-2020-9502

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dahuasecurity:sd6al_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:sd6al:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dahuasecurity:sd5a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:sd5a:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dahuasecurity:sd1a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:sd1a:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:dahuasecurity:ptz1a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:ptz1a:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:dahuasecurity:sd50_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:sd50:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:dahuasecurity:sd52c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:sd52c:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:dahuasecurity:ipc-hx5842h_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:ipc-hx5842h:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:dahuasecurity:ipc-hx7842h_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:ipc-hx7842h:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:dahuasecurity:ipc-hx2xxx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:ipc-hx2xxx:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:dahuasecurity:ipc-hxxx5x4x_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:ipc-hxxx5x4x:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:dahuasecurity:n42b1p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n42b1p:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:dahuasecurity:n42b2p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n42b2p:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:dahuasecurity:n42b3p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n42b3p:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:dahuasecurity:n52a4p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n52a4p:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:dahuasecurity:n54a4p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n54a4p:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:dahuasecurity:n52b2p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n52b2p:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:dahuasecurity:n52b5p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n52b5p:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:dahuasecurity:n52b3p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n52b3p:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:dahuasecurity:n54b2p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:n54b2p:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:dahuasecurity:ipc-hdbw1320e-w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dahuasecurity:ipc-hdbw1320e-w:-:*:*:*:*:*:*:*

Information

Published : 2020-05-13 09:15

Updated : 2020-05-18 12:42


NVD link : CVE-2020-9502

Mitre link : CVE-2020-9502


JSON object : View

CWE
CWE-330

Use of Insufficiently Random Values

Advertisement

dedicated server usa

Products Affected

dahuasecurity

  • n54b2p
  • n52b2p
  • n52b2p_firmware
  • n52b5p
  • ipc-hx7842h_firmware
  • sd6al
  • ipc-hx5842h
  • ipc-hx2xxx
  • n42b2p
  • ipc-hx2xxx_firmware
  • sd50_firmware
  • sd6al_firmware
  • n52a4p
  • ipc-hx7842h
  • n42b1p
  • sd50
  • sd52c_firmware
  • sd52c
  • sd1a_firmware
  • sd5a
  • n42b3p
  • sd1a
  • ptz1a
  • n54a4p
  • ipc-hx5842h_firmware
  • n42b3p_firmware
  • ipc-hxxx5x4x_firmware
  • n52b3p
  • ipc-hdbw1320e-w
  • n42b1p_firmware
  • ipc-hxxx5x4x
  • n54b2p_firmware
  • ptz1a_firmware
  • sd5a_firmware
  • n52a4p_firmware
  • n54a4p_firmware
  • n52b5p_firmware
  • n52b3p_firmware
  • ipc-hdbw1320e-w_firmware
  • n42b2p_firmware