Created CVE-2021-33045.yaml (Dahua IPC/VTH/VTO - Authentication Bypass) KEV

[cybermorgue]

Template / PR Information

Created CVE 2021 33045 template. A vulnerability in Dahua Cam for Authentication Bypass.

Template Validation

I've validated this template locally?

• YES
• NO

Additional References

https://nvd.nist.gov/vuln/detail/cve-2021-33045

[cybermorgue]

Hi. Is anything wrong with this PR?

[DhiyaneshGeek]

Hi @cybermorgue,

Is there any documentation or setup instructions available for deploying the vulnerable environment or running the software locally? Also, if you have any sample data that could help with debugging, that would be greatly appreciated.

Thanks

[cybermorgue]

Hi @DhiyaneshGeek,

I'm afraid it's not possible to provide documentation, setup instructions, or sample data for this finding. This was an IP Camera discovered during an external penetration test, meaning it's a physical device accessible from the internet, not a replicable environment or software that can be run locally.

This is the repo for the exploit in which the template is based: https://github.com/mcw0/DahuaConsole

I hope this clarifies the situation.

Thanks.

[cybermorgue]

Hello.

More info?

Thank you.

[DhiyaneshGeek]

Hi @cybermorgue

we are looking into this

Thanks for the script !

[DhiyaneshGeek]

Hi @cybermorgue

i have made some changes to the template, let me know if it looks good !

Thank you so much for sharing this template with the community and contributing to this project 🍻

You can grab some cool PD stickers over here http://nux.gg/stickers 😄

You can join our discord server. It's a great place to connect with fellow contributors and stay updated with the latest developments. Thank you once again