CVE-2024-39945

Published: Jul 31, 2024Modified: Mar 27, 2025

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device to crash.

Affected (56)

Dahuasecurity

56 products

Nvr4104 4ks2/l Firmware

Nvr4108 4ks2/l Firmware

Nvr4116 4ks2/l Firmware

Nvr4104 P 4ks2/l Firmware

Nvr4108 P 4ks2/l Firmware

Nvr4108 8p 4ks2/l Firmware

Nvr4116 8p 4ks2/l Firmware

Nvr4104hs 4ks2/l Firmware

Nvr4108hs 4ks2/l Firmware

Nvr4104hs P 4ks2/l Firmware

Nvr4108hs P 4ks2/l Firmware

Nvr4108hs 8p 4ks2/l Firmware

Nvr4116hs 8p 4ks2/l Firmware

Nvr4204 4ks2/l Firmware

Nvr4208 4ks2/l Firmware

Nvr4216 4ks2/l Firmware

Nvr4204 P 4ks2/l Firmware

Nvr4208 8p 4ks2/l Firmware

Nvr4216 16p 4ks2/l Firmware

Nvr4232 4ks2/l Firmware

Nvr4232 16p 4ks2/l Firmware

Nvr4116hs 4ks2/l Firmware

Nvr4416 4ks2/i Firmware

Nvr4416 16p 4ks2/i Firmware

Nvr4432 16p 4ks2/i Firmware

Nvr4816 4ks2/i Firmware

Nvr4816 16p 4ks2/i Firmware

Nvr4832 4ks2/i Firmware

Nvr4832 16p 4ks2/i Firmware

Nvr4432 4ks2/i Firmware

Nvr4232 4ks3 Firmware

Nvr4232 16p 4ks3 Firmware

Nvr4216 4ks3 Firmware

Nvr4216 16p 4ks3 Firmware

Nvr4208 8p 4ks3 Firmware

Nvr4208 4ks3 Firmware

Nvr4204 P 4ks3 Firmware

Nvr4204 4ks3 Firmware

Nvr4116hs 8p 4ks3 Firmware

Nvr4116hs 4ks3 Firmware

Nvr4108hs P 4ks3 Firmware

Nvr4108hs 8p 4ks3 Firmware

Nvr4108hs 4ks3 Firmware

Nvr4104hs P 4ks3 Firmware

Nvr4104hs 4ks3 Firmware

Nvr4116 8p 4ks3 Firmware

Nvr4116 4ks3 Firmware

Nvr4108 P 4ks3 Firmware

Nvr4104 4ks3 Firmware

Nvr4108 8p 4ks3 Firmware

Nvr4108 4ks3 Firmware

Nvr4104 P 4ks3 Firmware

Nvr4104hs P 4ks3(960g) Firmware

Nvr4104hs 4ks3(960g) Firmware

Nvr4108hs 4ks3(960g) Firmware

Nvr4104 P 4ks3(960g) Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4104 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4104 4ks2/l	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4108 4ks2/l Firmware	Version 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4108 4ks2/l	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4116 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4116 4ks2/l	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4104 P 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4104 P 4ks2/l	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4108 P 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4108 P 4ks2/l	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4108 8p 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4108 8p 4ks2/l	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4116 8p 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4116 8p 4ks2/l	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4104hs 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4104hs 4ks2/l	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4108hs 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4108hs 4ks2/l	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4104hs P 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4104hs P 4ks2/l	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4108hs P 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4108hs P 4ks2/l	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4108hs 8p 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4108hs 8p 4ks2/l	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4116hs 8p 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4116hs 8p 4ks2/l	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4204 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4204 4ks2/l	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4208 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4208 4ks2/l	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4216 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4216 4ks2/l	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4204 P 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4204 P 4ks2/l	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4208 8p 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4208 8p 4ks2/l	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4216 16p 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4216 16p 4ks2/l	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4232 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4232 4ks2/l	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4232 16p 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4232 16p 4ks2/l	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4116hs 4ks2/l Firmware	Before 4.003.0000000.1.r.240515

Running on/with	Platform Versions
Dahuasecurity Nvr4116hs 4ks2/l	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4416 4ks2/i Firmware	Before 4.001.0000001.6.r.240725

Running on/with	Platform Versions
Dahuasecurity Nvr4416 4ks2/i	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4416 16p 4ks2/i Firmware	Before 4.001.0000001.6.r.240725

Running on/with	Platform Versions
Dahuasecurity Nvr4416 16p 4ks2/i	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4432 16p 4ks2/i Firmware	Before 4.001.0000001.6.r.240725

Running on/with	Platform Versions
Dahuasecurity Nvr4432 16p 4ks2/i	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4816 4ks2/i Firmware	Before 4.001.0000001.6.r.240725

Running on/with	Platform Versions
Dahuasecurity Nvr4816 4ks2/i	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4816 16p 4ks2/i Firmware	Before 4.001.0000001.6.r.240725

Running on/with	Platform Versions
Dahuasecurity Nvr4816 16p 4ks2/i	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4832 4ks2/i Firmware	Before 4.001.0000001.6.r.240725

Running on/with	Platform Versions
Dahuasecurity Nvr4832 4ks2/i	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4832 16p 4ks2/i Firmware	Before 4.001.0000001.6.r.240725

Running on/with	Platform Versions
Dahuasecurity Nvr4832 16p 4ks2/i	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4432 4ks2/i Firmware	Before 4.001.0000001.6.r.240725

Running on/with	Platform Versions
Dahuasecurity Nvr4432 4ks2/i	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4232 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4232 4ks3	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4232 16p 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4232 16p 4ks3	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4216 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4216 4ks3	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4216 16p 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4216 16p 4ks3	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4208 8p 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4208 8p 4ks3	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4208 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4208 4ks3	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4204 P 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4204 P 4ks3	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4204 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4204 4ks3	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4116hs 8p 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4116hs 8p 4ks3	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4116hs 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4116hs 4ks3	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4108hs P 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4108hs P 4ks3	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4108hs 8p 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4108hs 8p 4ks3	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4108hs 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4108hs 4ks3	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4104hs P 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4104hs P 4ks3	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4104hs 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4104hs 4ks3	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4116 8p 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4116 8p 4ks3	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4116 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4116 4ks3	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4108 P 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4108 P 4ks3	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4104 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4104 4ks3	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4108 8p 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4108 8p 4ks3	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4108 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4108 4ks3	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4104 P 4ks3 Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4104 P 4ks3	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4104hs P 4ks3(960g) Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4104hs P 4ks3(960g)	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4104hs 4ks3(960g) Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4104hs 4ks3(960g)	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4108hs 4ks3(960g) Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4108hs 4ks3(960g)	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Nvr4104 P 4ks3(960g) Firmware	Before 4.003.0000000.0.r.240312

Running on/with	Platform Versions
Dahuasecurity Nvr4104 P 4ks3(960g)	All versions

Related CWEs

CWE-703

Improper Check or Handling of Exceptional Conditions

The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.

References (1)

https://www.dahuasecurity.com/aboutUs/trustedCenter/details/768

Source: cybersecurity@dahuatech.com

Vendor Advisory

Timeline

No history available yet.