CVE-2019-9682 - CVE House
Back to Database
Status published High CVE-2019-9682

Dahua devices with Build time before December 2019 use strong...

Vulnerability Description

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-9682

Credits & Attribution

No credits recorded in the NVD database.

References

More from n/a

View All →
CVE-2025-9910
Versions of the package jsondiffpatch before 0.7.2 are vulnerable to...
Low 2.3
CVE-2025-9802
RemoteClinic profile.php sql injection
Medium 5.1
CVE-2025-9799
Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery
Low 2.3
CVE-2025-9775
RemoteClinic edit-my-profile.php unrestricted upload
Medium 6.9
CVE-2025-9774
RemoteClinic edit-patient.php information disclosure
Medium 5.3

Affected Vendor

Affected Software

IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series,IPC-HDBW1320E-W
Vulnerable Versions:
Versions which Build time before December,2019

Timeline

Official Publish: May 13th, 2020
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.