CVE-2021-33045

Dahua IP cameras allow attackers to bypass authentication by specifying a loopback device, enabling unauthorized access to surveillance feeds.

This authentication bypass vulnerability allows attackers to bypass security controls on Dahua IP cameras by manipulating the loopback device parameter during authentication, potentially granting unauthorized access to surveillance feeds. DIB organizations must ensure all Dahua devices are patched and network segmentation is enforced to prevent unauthorized access to sensitive video data.

Shame score — A known authentication bypass vulnerability that was actively exploited but did not involve remote code execution or zero-day exploitation.