Vulnerability-Lookup

BDU:2026-08449 (CVE-2026-29116)

Vulnerability from fstec – Published: 2026-06-18 – Updated: 2026-06-18 – View on bdu.fstec.ru Fixed

Title

Уязвимость микропрограммного обеспечения устройств Dahua, связанная с неконтролируемым достижимым утверждением, позволяющая нарушителю вызвать отказ в обслуживании

Summary

Уязвимость микропрограммного обеспечения устройств Dahua связана с неконтролируемым достижимым утверждением. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании путем отправки специально сформированного пакета данных

Severity

7.8 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 (High) CVSS 3.1


                      
                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.7 (High) CVSS 4.0


                      
                        CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Functionality abuse

Incidents

Being clarified

Remediation

Software update

CWE

CWE-617 - Доступная функция assert()

Aliases

CVE-2026-29116

References

2 references

URL
https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-2026…
https://materialfile.dahuasecurity.com/new_uploads_formal/soft/20260609/Affecte…

Impacted products

239 products from 2 vendors

Vendors

Dahua Technology Co., Ltd.

Products

EVS50S Series, DHI-TPC-SD5641-T, EVS51S Series, DHI-TPC-SD5441-T, EVS51S-S3 Series, DHI-TPC-SD5641, EVS72S Series, DHI-TPC-SD5441, EVS82X Series, DHI-TPC-SD8641B, NVR5-EI Series, DHI-TPC-SD8441B, NVR5-EI2 Series, DHI-TPC-BF5601-T, XVR1B04H-I/T, XVR4232AN-I/T, SD60432DB-HNY-SL, SD60432DB-HNY, IPC-HDW5241TM-ASE, IPC-HDBW5241R-ASE, IPC-HFW5241T-ASE, IPC-HFW5241T-SE, IPC-HFW5241E-ASE, IPC-HF5842F-ZE, IPC-HF5442F-ZE, IPC-HDW5842T-ZE, IPC-HDW5442T-ZE, IPC-HFW5842E-ZE, IPC-HFW5842E-Z4E, IPC-HFW5842E-ZHE, IPC-HFW5442E-Z4E, IPC-HFW5442E-ZHE, IPC-HDBW5842E-ZE, IPC-HDBW5842E-Z4E, IPC-HDBW5442E-ZE, IPC-HDBW5442E-Z4E, IPC-HDBW5842E-ZHE, IPC-HF5241F-ZE, IPC-HDBW5241E-ZE, IPC-HDBW5241E-Z5E, IPC-HFW5241E-ZE, IPC-HFW5241E-Z5E, IPC-HDW5241T-ZE, IPC-HDBW5842H-ZHE, IPC-HDBW5842H-Z4HE, IPC-HDBW5442H-ZHE, IPC-HDBW5442H-Z4HE, IPC-HFW5842T-ASE, IPC-HFW5842T-SE, IPC-HFW5442T-SE, IPC-HFW5442T-ASE, IPC-HFW5842E-ASE, IPC-HFW5442E-ASE, IPC-HDBW5842R-ASE, IPC-HDBW5442R-ASE, IPC-HDW5842TM-ASE, IPC-HDW5442TM-ASE, IPC-HFW5442E-ZE, IPC-HFW5241E-Z12E, IPC-HFW5842H-ZHE, IPC-HFW5842H-Z4HE, IPC-HFW5442H-ZHE, IPC-HFW5442H-Z4HE, IPC-HDBW5442E-ZHE, SD1A204DB-GNY, SD1A204DB-GNY-W, IPC-HDW8441X-3D, IPC-HDBW3441R-AS-P, IPC-HFW3441T-AS-P, IPC-HFW5842DK1-Z-5G, IPC-HFW5842DK1-Z4-5G, IPC-PDW5849-A180-E2-ASTE, IPC-PFW5849-A180-E2-ASTE, IPC-PFW3849S-A180-AS-PV, IPC-PDW3849-A180-AS-PV, IPC-HDBW3441DR1-AST-4G-EAU, IPC-HDBW3441DR1-AST-4G-LA, IPC-HDW5449H-ZE-LED, IPC-HFW5449E-SE-LED, IPC-HDBW5441E-ZE-HDMI, IPC-HDBW5441R-ASE-HDMI, SD1A404DB-GNY, SD1A404DB-GNY-W, SD1A404DB-GNY-W-PV, SD6AL445GB-HNV, SDT3A400-GA-HNP-BX, SD5A225GB-HNR-SL, SD8A3440GA-HNV, SD8A440GA-HNV, SD5A825GA-HNR, SD50232GB-HNR, SD50432GB-HNR, SD52C232GB-HNR, SD52C432GB-HNR, SD5A245GB-HNR, SD5A445GB-HNR, SD4E425GB-HNR-A-PV1, SD5A825GB-HNR, SD4E225GB-HNR-A-PV1, SD4E825GB-HNR-A-PV1, SD6AL245GB-HNV, SD6AL445GB-HNV-IR, SD6C3432GB-HNR-AGQ-PV1-EAU, SD6C3432GB-HNR-AGQ-PV1-LA, SD8A3833GA-HNV, IPC-HDPW5441C-AS-PV, IPC-PFW2849S-A180-S-PV, IPC-PDW2849-A180-S-PV, SD49225DB-HNY, SD49216DB-HNY, SD50225DB-HNY, SD22204DB-GNY, SD22204DB-GNY-W, SD22404DB-GNY, SD22404DB-GNY-W, SD4A425DB-HNY, SD49425DB-HNY-GQ-LA, SD3E205DB-GNY-A-PV1, SD3E405DB-GNY-A-PV1, SD49425DB-HNY-GQ-EAU, SD4A216DB-HNY, SD3C205DB-GNY-A-PV, SD3C205DB-GNY-AW-PV, SD3C405DB-GNY-A-PV, SD3C405DB-GNY-AW-PV, SD29204DB-GNY, SD29204DB-GNY-W, SD29404DB-GNY, SD29404DB-GNY-W, SD52C225DB-HNY, SD49425DB-HNY, SD3E410DB-GNY-A-PV1, SD4A425DB-HNY-R, KTP03, VTO2301R-P, VTO4202F-PI1, ASI6213D, ASI6214D, ASI3213A-W, ASI3214A-W, ASI3223A, ASA3223A-W, ASI6213S, ASI6213S-D, ASI6213S-PW, ASI6214S, ASI6214S-D, ASI6214S-PW, ASI7213S-W, ASI7214S-W, ASI7213K-W, ASI8214S-W, ASI8213S-W, ASI6214J-MFW-V1, ASI6213J-MW-V1, ASI6213S-PW-V1, ASI6213D-W, ASI6214D-W, ASI3203E, ASI3203E-DW, ASI3203E-W, ASI3204E, ASI3204E-DW, ASI3204E-W, VTH5421HW, VTH5421HB, VTH2621GW-P, VTH2621GB-P, VTH2621GW-WP, VTH2621GB-WP, VTH2622GW-W, VTH2622GB-W, VTO3311Q-WP, VTO3312Q-P, VTO2311R-WP, VTO1301R-W, VTH5422HW-W, VTH5422HB-W, VTH5421HW-W, VTH5421HB-W, VTO2101E-P-S2, VTH8621KMS-WP, VTH8622KMS-W, VTH8642KMS-W, VTH8641KMS-WP, VTH2611L-WP, VTH2612L, VTH2612L-W, VTO0301R-W, VTO2111D-P-S3, VTO2211G-WP-S2, VTO2211G-P-S2, VTO6222E-P, VTO3222E-P, VTO4201F-P, VTO4201F-P1, VTO4202F-P1, VTO4202F-P-S3, VTO4202FB-P-S3, VTO4202FB-P1, VTO2201F-P-S2, VTO4201FB-P, VTO4201FB-P1, VTO2202F-P-S3, VTO6521F-S2, VTO6521H-S2, VTO6521H-D-S2, VTO6531H-S2, VTO6531F-S2, VTO6541H-S2, VTO6521K-S2, VTH5422HW, VTH5422HB, VTH5321GW-W, VTH5321GB-W, VTH5341G-W, VTH2421FW, VTH2421FB, VTH5421EW-H, VTH5441G, VTH5421EB-H, VTH5241DW-S2, VTH5221DW-S2, VTH5221DB-S2, VTH2421FW-P, VTH2421FB-P, VTO7531G-S3, VTO7541G-S3, VTO9541D-S3, VTO7631Q, VTO9631Q, VTO6631QS-WP, VTO6631QB-WP, ASI3103F-W, ASI3103F-MEW, ASI3103F-MEPW, DHI-TPC-BF5401, DHI-TPC-BF5601, DHI-TPC-BF5401-T

Versions

- (EVS50S Series), - (DHI-TPC-SD5641-T), - (EVS51S Series), - (DHI-TPC-SD5441-T), - (EVS51S-S3 Series), - (DHI-TPC-SD5641), - (EVS72S Series), - (DHI-TPC-SD5441), - (EVS82X Series), - (DHI-TPC-SD8641B), - (NVR5-EI Series), - (DHI-TPC-SD8441B), - (NVR5-EI2 Series), - (DHI-TPC-BF5601-T), - (XVR1B04H-I/T), - (XVR4232AN-I/T), - (SD60432DB-HNY-SL), - (SD60432DB-HNY), - (IPC-HDW5241TM-ASE), - (IPC-HDBW5241R-ASE), - (IPC-HFW5241T-ASE), - (IPC-HFW5241T-SE), - (IPC-HFW5241E-ASE), - (IPC-HF5842F-ZE), - (IPC-HF5442F-ZE), - (IPC-HDW5842T-ZE), - (IPC-HDW5442T-ZE), - (IPC-HFW5842E-ZE), - (IPC-HFW5842E-Z4E), - (IPC-HFW5842E-ZHE), - (IPC-HFW5442E-Z4E), - (IPC-HFW5442E-ZHE), - (IPC-HDBW5842E-ZE), - (IPC-HDBW5842E-Z4E), - (IPC-HDBW5442E-ZE), - (IPC-HDBW5442E-Z4E), - (IPC-HDBW5842E-ZHE), - (IPC-HF5241F-ZE), - (IPC-HDBW5241E-ZE), - (IPC-HDBW5241E-Z5E), - (IPC-HFW5241E-ZE), - (IPC-HFW5241E-Z5E), - (IPC-HDW5241T-ZE), - (IPC-HDBW5842H-ZHE), - (IPC-HDBW5842H-Z4HE), - (IPC-HDBW5442H-ZHE), - (IPC-HDBW5442H-Z4HE), - (IPC-HFW5842T-ASE), - (IPC-HFW5842T-SE), - (IPC-HFW5442T-SE), - (IPC-HFW5442T-ASE), - (IPC-HFW5842E-ASE), - (IPC-HFW5442E-ASE), - (IPC-HDBW5842R-ASE), - (IPC-HDBW5442R-ASE), - (IPC-HDW5842TM-ASE), - (IPC-HDW5442TM-ASE), - (IPC-HFW5442E-ZE), - (IPC-HFW5241E-Z12E), - (IPC-HFW5842H-ZHE), - (IPC-HFW5842H-Z4HE), - (IPC-HFW5442H-ZHE), - (IPC-HFW5442H-Z4HE), - (IPC-HDBW5442E-ZHE), - (SD1A204DB-GNY), - (SD1A204DB-GNY-W), - (IPC-HDW8441X-3D), - (IPC-HDBW3441R-AS-P), - (IPC-HFW3441T-AS-P), - (IPC-HFW5842DK1-Z-5G), - (IPC-HFW5842DK1-Z4-5G), - (IPC-PDW5849-A180-E2-ASTE), - (IPC-PFW5849-A180-E2-ASTE), - (IPC-PFW3849S-A180-AS-PV), - (IPC-PDW3849-A180-AS-PV), - (IPC-HDBW3441DR1-AST-4G-EAU), - (IPC-HDBW3441DR1-AST-4G-LA), - (IPC-HDW5449H-ZE-LED), - (IPC-HFW5449E-SE-LED), - (IPC-HDBW5441E-ZE-HDMI), - (IPC-HDBW5441R-ASE-HDMI), - (SD1A404DB-GNY), - (SD1A404DB-GNY-W), - (SD1A404DB-GNY-W-PV), - (SD6AL445GB-HNV), - (SDT3A400-GA-HNP-BX), - (SD5A225GB-HNR-SL), - (SD8A3440GA-HNV), - (SD8A440GA-HNV), - (SD5A825GA-HNR), - (SD50232GB-HNR), - (SD50432GB-HNR), - (SD52C232GB-HNR), - (SD52C432GB-HNR), - (SD5A245GB-HNR), - (SD5A445GB-HNR), - (SD4E425GB-HNR-A-PV1), - (SD5A825GB-HNR), - (SD4E225GB-HNR-A-PV1), - (SD4E825GB-HNR-A-PV1), - (SD6AL245GB-HNV), - (SD6AL445GB-HNV-IR), - (SD6C3432GB-HNR-AGQ-PV1-EAU), - (SD6C3432GB-HNR-AGQ-PV1-LA), - (SD8A3833GA-HNV), - (IPC-HDPW5441C-AS-PV), - (IPC-PFW2849S-A180-S-PV), - (IPC-PDW2849-A180-S-PV), - (SD49225DB-HNY), - (SD49216DB-HNY), - (SD50225DB-HNY), - (SD22204DB-GNY), - (SD22204DB-GNY-W), - (SD22404DB-GNY), - (SD22404DB-GNY-W), - (SD4A425DB-HNY), - (SD49425DB-HNY-GQ-LA), - (SD3E205DB-GNY-A-PV1), - (SD3E405DB-GNY-A-PV1), - (SD49425DB-HNY-GQ-EAU), - (SD4A216DB-HNY), - (SD3C205DB-GNY-A-PV), - (SD3C205DB-GNY-AW-PV), - (SD3C405DB-GNY-A-PV), - (SD3C405DB-GNY-AW-PV), - (SD29204DB-GNY), - (SD29204DB-GNY-W), - (SD29404DB-GNY), - (SD29404DB-GNY-W), - (SD52C225DB-HNY), - (SD49425DB-HNY), - (SD3E410DB-GNY-A-PV1), - (SD4A425DB-HNY-R), - (KTP03), - (VTO2301R-P), - (VTO4202F-PI1), - (ASI6213D), - (ASI6214D), - (ASI3213A-W), - (ASI3214A-W), - (ASI3223A), - (ASA3223A-W), - (ASI6213S), - (ASI6213S-D), - (ASI6213S-PW), - (ASI6214S), - (ASI6214S-D), - (ASI6214S-PW), - (ASI7213S-W), - (ASI7214S-W), - (ASI7213K-W), - (ASI8214S-W), - (ASI8213S-W), - (ASI6214J-MFW-V1), - (ASI6213J-MW-V1), - (ASI6213S-PW-V1), - (ASI6213D-W), - (ASI6214D-W), - (ASI3203E), - (ASI3203E-DW), - (ASI3203E-W), - (ASI3204E), - (ASI3204E-DW), - (ASI3204E-W), - (VTH5421HW), - (VTH5421HB), - (VTH2621GW-P), - (VTH2621GB-P), - (VTH2621GW-WP), - (VTH2621GB-WP), - (VTH2622GW-W), - (VTH2622GB-W), - (VTO3311Q-WP), - (VTO3312Q-P), - (VTO2311R-WP), - (VTO1301R-W), - (VTH5422HW-W), - (VTH5422HB-W), - (VTH5421HW-W), - (VTH5421HB-W), - (VTO2101E-P-S2), - (VTH8621KMS-WP), - (VTH8622KMS-W), - (VTH8642KMS-W), - (VTH8641KMS-WP), - (VTH2611L-WP), - (VTH2612L), - (VTH2612L-W), - (VTO0301R-W), - (VTO2111D-P-S3), - (VTO2211G-WP-S2), - (VTO2211G-P-S2), - (VTO6222E-P), - (VTO3222E-P), - (VTO4201F-P), - (VTO4201F-P1), - (VTO4202F-P1), - (VTO4202F-P-S3), - (VTO4202FB-P-S3), - (VTO4202FB-P1), - (VTO2201F-P-S2), - (VTO4201FB-P), - (VTO4201FB-P1), - (VTO2202F-P-S3), - (VTO6521F-S2), - (VTO6521H-S2), - (VTO6521H-D-S2), - (VTO6531H-S2), - (VTO6531F-S2), - (VTO6541H-S2), - (VTO6521K-S2), - (VTH5422HW), - (VTH5422HB), - (VTH5321GW-W), - (VTH5321GB-W), - (VTH5341G-W), - (VTH2421FW), - (VTH2421FB), - (VTH5421EW-H), - (VTH5441G), - (VTH5421EB-H), - (VTH5241DW-S2), - (VTH5221DW-S2), - (VTH5221DB-S2), - (VTH2421FW-P), - (VTH2421FB-P), - (VTO7531G-S3), - (VTO7541G-S3), - (VTO9541D-S3), - (VTO7631Q), - (VTO9631Q), - (VTO6631QS-WP), - (VTO6631QB-WP), - (ASI3103F-W), - (ASI3103F-MEW), - (ASI3103F-MEPW), - (DHI-TPC-BF5401), - (DHI-TPC-BF5601), - (DHI-TPC-BF5401-T)

Product types

Firmware

Mitigations

Использование рекомендаций производителя: https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-202606-001:-security-advisory-%E2%80%93-vulnerabilities-found-in-some-dahua-products

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "CVSS 4.0": "AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Dahua Technology Co., Ltd.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (EVS50S Series), - (DHI-TPC-SD5641-T), - (EVS51S Series), - (DHI-TPC-SD5441-T), - (EVS51S-S3 Series), - (DHI-TPC-SD5641), - (EVS72S Series), - (DHI-TPC-SD5441), - (EVS82X Series), - (DHI-TPC-SD8641B), - (NVR5-EI Series), - (DHI-TPC-SD8441B), - (NVR5-EI2 Series), - (DHI-TPC-BF5601-T), - (XVR1B04H-I/T), - (XVR4232AN-I/T), - (SD60432DB-HNY-SL), - (SD60432DB-HNY), - (IPC-HDW5241TM-ASE), - (IPC-HDBW5241R-ASE), - (IPC-HFW5241T-ASE), - (IPC-HFW5241T-SE), - (IPC-HFW5241E-ASE), - (IPC-HF5842F-ZE), - (IPC-HF5442F-ZE), - (IPC-HDW5842T-ZE), - (IPC-HDW5442T-ZE), - (IPC-HFW5842E-ZE), - (IPC-HFW5842E-Z4E), - (IPC-HFW5842E-ZHE), - (IPC-HFW5442E-Z4E), - (IPC-HFW5442E-ZHE), - (IPC-HDBW5842E-ZE), - (IPC-HDBW5842E-Z4E), - (IPC-HDBW5442E-ZE), - (IPC-HDBW5442E-Z4E), - (IPC-HDBW5842E-ZHE), - (IPC-HF5241F-ZE), - (IPC-HDBW5241E-ZE), - (IPC-HDBW5241E-Z5E), - (IPC-HFW5241E-ZE), - (IPC-HFW5241E-Z5E), - (IPC-HDW5241T-ZE), - (IPC-HDBW5842H-ZHE), - (IPC-HDBW5842H-Z4HE), - (IPC-HDBW5442H-ZHE), - (IPC-HDBW5442H-Z4HE), - (IPC-HFW5842T-ASE), - (IPC-HFW5842T-SE), - (IPC-HFW5442T-SE), - (IPC-HFW5442T-ASE), - (IPC-HFW5842E-ASE), - (IPC-HFW5442E-ASE), - (IPC-HDBW5842R-ASE), - (IPC-HDBW5442R-ASE), - (IPC-HDW5842TM-ASE), - (IPC-HDW5442TM-ASE), - (IPC-HFW5442E-ZE), - (IPC-HFW5241E-Z12E), - (IPC-HFW5842H-ZHE), - (IPC-HFW5842H-Z4HE), - (IPC-HFW5442H-ZHE), - (IPC-HFW5442H-Z4HE), - (IPC-HDBW5442E-ZHE), - (SD1A204DB-GNY), - (SD1A204DB-GNY-W), - (IPC-HDW8441X-3D), - (IPC-HDBW3441R-AS-P), - (IPC-HFW3441T-AS-P), - (IPC-HFW5842DK1-Z-5G), - (IPC-HFW5842DK1-Z4-5G), - (IPC-PDW5849-A180-E2-ASTE), - (IPC-PFW5849-A180-E2-ASTE), - (IPC-PFW3849S-A180-AS-PV), - (IPC-PDW3849-A180-AS-PV), - (IPC-HDBW3441DR1-AST-4G-EAU), - (IPC-HDBW3441DR1-AST-4G-LA), - (IPC-HDW5449H-ZE-LED), - (IPC-HFW5449E-SE-LED), - (IPC-HDBW5441E-ZE-HDMI), - (IPC-HDBW5441R-ASE-HDMI), - (SD1A404DB-GNY), - (SD1A404DB-GNY-W), - (SD1A404DB-GNY-W-PV), - (SD6AL445GB-HNV), - (SDT3A400-GA-HNP-BX), - (SD5A225GB-HNR-SL), - (SD8A3440GA-HNV), - (SD8A440GA-HNV), - (SD5A825GA-HNR), - (SD50232GB-HNR), - (SD50432GB-HNR), - (SD52C232GB-HNR), - (SD52C432GB-HNR), - (SD5A245GB-HNR), - (SD5A445GB-HNR), - (SD4E425GB-HNR-A-PV1), - (SD5A825GB-HNR), - (SD4E225GB-HNR-A-PV1), - (SD4E825GB-HNR-A-PV1), - (SD6AL245GB-HNV), - (SD6AL445GB-HNV-IR), - (SD6C3432GB-HNR-AGQ-PV1-EAU), - (SD6C3432GB-HNR-AGQ-PV1-LA), - (SD8A3833GA-HNV), - (IPC-HDPW5441C-AS-PV), - (IPC-PFW2849S-A180-S-PV), - (IPC-PDW2849-A180-S-PV), - (SD49225DB-HNY), - (SD49216DB-HNY), - (SD50225DB-HNY), - (SD22204DB-GNY), - (SD22204DB-GNY-W), - (SD22404DB-GNY), - (SD22404DB-GNY-W), - (SD4A425DB-HNY), - (SD49425DB-HNY-GQ-LA), - (SD3E205DB-GNY-A-PV1), - (SD3E405DB-GNY-A-PV1), - (SD49425DB-HNY-GQ-EAU), - (SD4A216DB-HNY), - (SD3C205DB-GNY-A-PV), - (SD3C205DB-GNY-AW-PV), - (SD3C405DB-GNY-A-PV), - (SD3C405DB-GNY-AW-PV), - (SD29204DB-GNY), - (SD29204DB-GNY-W), - (SD29404DB-GNY), - (SD29404DB-GNY-W), - (SD52C225DB-HNY), - (SD49425DB-HNY), - (SD3E410DB-GNY-A-PV1), - (SD4A425DB-HNY-R), - (KTP03), - (VTO2301R-P), - (VTO4202F-PI1), - (ASI6213D), - (ASI6214D), - (ASI3213A-W), - (ASI3214A-W), - (ASI3223A), - (ASA3223A-W), - (ASI6213S), - (ASI6213S-D), - (ASI6213S-PW), - (ASI6214S), - (ASI6214S-D), - (ASI6214S-PW), - (ASI7213S-W), - (ASI7214S-W), - (ASI7213K-W), - (ASI8214S-W), - (ASI8213S-W), - (ASI6214J-MFW-V1), - (ASI6213J-MW-V1), - (ASI6213S-PW-V1), - (ASI6213D-W), - (ASI6214D-W), - (ASI3203E), - (ASI3203E-DW), - (ASI3203E-W), - (ASI3204E), - (ASI3204E-DW), - (ASI3204E-W), - (VTH5421HW), - (VTH5421HB), - (VTH2621GW-P), - (VTH2621GB-P), - (VTH2621GW-WP), - (VTH2621GB-WP), - (VTH2622GW-W), - (VTH2622GB-W), - (VTO3311Q-WP), - (VTO3312Q-P), - (VTO2311R-WP), - (VTO1301R-W), - (VTH5422HW-W), - (VTH5422HB-W), - (VTH5421HW-W), - (VTH5421HB-W), - (VTO2101E-P-S2), - (VTH8621KMS-WP), - (VTH8622KMS-W), - (VTH8642KMS-W), - (VTH8641KMS-WP), - (VTH2611L-WP), - (VTH2612L), - (VTH2612L-W), - (VTO0301R-W), - (VTO2111D-P-S3), - (VTO2211G-WP-S2), - (VTO2211G-P-S2), - (VTO6222E-P), - (VTO3222E-P), - (VTO4201F-P), - (VTO4201F-P1), - (VTO4202F-P1), - (VTO4202F-P-S3), - (VTO4202FB-P-S3), - (VTO4202FB-P1), - (VTO2201F-P-S2), - (VTO4201FB-P), - (VTO4201FB-P1), - (VTO2202F-P-S3), - (VTO6521F-S2), - (VTO6521H-S2), - (VTO6521H-D-S2), - (VTO6531H-S2), - (VTO6531F-S2), - (VTO6541H-S2), - (VTO6521K-S2), - (VTH5422HW), - (VTH5422HB), - (VTH5321GW-W), - (VTH5321GB-W), - (VTH5341G-W), - (VTH2421FW), - (VTH2421FB), - (VTH5421EW-H), - (VTH5441G), - (VTH5421EB-H), - (VTH5241DW-S2), - (VTH5221DW-S2), - (VTH5221DB-S2), - (VTH2421FW-P), - (VTH2421FB-P), - (VTO7531G-S3), - (VTO7541G-S3), - (VTO9541D-S3), - (VTO7631Q), - (VTO9631Q), - (VTO6631QS-WP), - (VTO6631QB-WP), - (ASI3103F-W), - (ASI3103F-MEW), - (ASI3103F-MEPW), - (DHI-TPC-BF5401), - (DHI-TPC-BF5601), - (DHI-TPC-BF5401-T)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-202606-001:-security-advisory-%E2%80%93-vulnerabilities-found-in-some-dahua-products",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "10.06.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "18.06.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "18.06.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-08449",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2026-29116",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "EVS50S Series, DHI-TPC-SD5641-T, EVS51S Series, DHI-TPC-SD5441-T, EVS51S-S3 Series, DHI-TPC-SD5641, EVS72S Series, DHI-TPC-SD5441, EVS82X Series, DHI-TPC-SD8641B, NVR5-EI Series, DHI-TPC-SD8441B, NVR5-EI2 Series, DHI-TPC-BF5601-T, XVR1B04H-I/T, XVR4232AN-I/T, SD60432DB-HNY-SL, SD60432DB-HNY, IPC-HDW5241TM-ASE, IPC-HDBW5241R-ASE, IPC-HFW5241T-ASE, IPC-HFW5241T-SE, IPC-HFW5241E-ASE, IPC-HF5842F-ZE, IPC-HF5442F-ZE, IPC-HDW5842T-ZE, IPC-HDW5442T-ZE, IPC-HFW5842E-ZE, IPC-HFW5842E-Z4E, IPC-HFW5842E-ZHE, IPC-HFW5442E-Z4E, IPC-HFW5442E-ZHE, IPC-HDBW5842E-ZE, IPC-HDBW5842E-Z4E, IPC-HDBW5442E-ZE, IPC-HDBW5442E-Z4E, IPC-HDBW5842E-ZHE, IPC-HF5241F-ZE, IPC-HDBW5241E-ZE, IPC-HDBW5241E-Z5E, IPC-HFW5241E-ZE, IPC-HFW5241E-Z5E, IPC-HDW5241T-ZE, IPC-HDBW5842H-ZHE, IPC-HDBW5842H-Z4HE, IPC-HDBW5442H-ZHE, IPC-HDBW5442H-Z4HE, IPC-HFW5842T-ASE, IPC-HFW5842T-SE, IPC-HFW5442T-SE, IPC-HFW5442T-ASE, IPC-HFW5842E-ASE, IPC-HFW5442E-ASE, IPC-HDBW5842R-ASE, IPC-HDBW5442R-ASE, IPC-HDW5842TM-ASE, IPC-HDW5442TM-ASE, IPC-HFW5442E-ZE, IPC-HFW5241E-Z12E, IPC-HFW5842H-ZHE, IPC-HFW5842H-Z4HE, IPC-HFW5442H-ZHE, IPC-HFW5442H-Z4HE, IPC-HDBW5442E-ZHE, SD1A204DB-GNY, SD1A204DB-GNY-W, IPC-HDW8441X-3D, IPC-HDBW3441R-AS-P, IPC-HFW3441T-AS-P, IPC-HFW5842DK1-Z-5G, IPC-HFW5842DK1-Z4-5G, IPC-PDW5849-A180-E2-ASTE, IPC-PFW5849-A180-E2-ASTE, IPC-PFW3849S-A180-AS-PV, IPC-PDW3849-A180-AS-PV, IPC-HDBW3441DR1-AST-4G-EAU, IPC-HDBW3441DR1-AST-4G-LA, IPC-HDW5449H-ZE-LED, IPC-HFW5449E-SE-LED, IPC-HDBW5441E-ZE-HDMI, IPC-HDBW5441R-ASE-HDMI, SD1A404DB-GNY, SD1A404DB-GNY-W, SD1A404DB-GNY-W-PV, SD6AL445GB-HNV, SDT3A400-GA-HNP-BX, SD5A225GB-HNR-SL, SD8A3440GA-HNV, SD8A440GA-HNV, SD5A825GA-HNR, SD50232GB-HNR, SD50432GB-HNR, SD52C232GB-HNR, SD52C432GB-HNR, SD5A245GB-HNR, SD5A445GB-HNR, SD4E425GB-HNR-A-PV1, SD5A825GB-HNR, SD4E225GB-HNR-A-PV1, SD4E825GB-HNR-A-PV1, SD6AL245GB-HNV, SD6AL445GB-HNV-IR, SD6C3432GB-HNR-AGQ-PV1-EAU, SD6C3432GB-HNR-AGQ-PV1-LA, SD8A3833GA-HNV, IPC-HDPW5441C-AS-PV, IPC-PFW2849S-A180-S-PV, IPC-PDW2849-A180-S-PV, SD49225DB-HNY, SD49216DB-HNY, SD50225DB-HNY, SD22204DB-GNY, SD22204DB-GNY-W, SD22404DB-GNY, SD22404DB-GNY-W, SD4A425DB-HNY, SD49425DB-HNY-GQ-LA, SD3E205DB-GNY-A-PV1, SD3E405DB-GNY-A-PV1, SD49425DB-HNY-GQ-EAU, SD4A216DB-HNY, SD3C205DB-GNY-A-PV, SD3C205DB-GNY-AW-PV, SD3C405DB-GNY-A-PV, SD3C405DB-GNY-AW-PV, SD29204DB-GNY, SD29204DB-GNY-W, SD29404DB-GNY, SD29404DB-GNY-W, SD52C225DB-HNY, SD49425DB-HNY, SD3E410DB-GNY-A-PV1, SD4A425DB-HNY-R, KTP03, VTO2301R-P, VTO4202F-PI1, ASI6213D, ASI6214D, ASI3213A-W, ASI3214A-W, ASI3223A, ASA3223A-W, ASI6213S, ASI6213S-D, ASI6213S-PW, ASI6214S, ASI6214S-D, ASI6214S-PW, ASI7213S-W, ASI7214S-W, ASI7213K-W, ASI8214S-W, ASI8213S-W, ASI6214J-MFW-V1, ASI6213J-MW-V1, ASI6213S-PW-V1, ASI6213D-W, ASI6214D-W, ASI3203E, ASI3203E-DW, ASI3203E-W, ASI3204E, ASI3204E-DW, ASI3204E-W, VTH5421HW, VTH5421HB, VTH2621GW-P, VTH2621GB-P, VTH2621GW-WP, VTH2621GB-WP, VTH2622GW-W, VTH2622GB-W, VTO3311Q-WP, VTO3312Q-P, VTO2311R-WP, VTO1301R-W, VTH5422HW-W, VTH5422HB-W, VTH5421HW-W, VTH5421HB-W, VTO2101E-P-S2, VTH8621KMS-WP, VTH8622KMS-W, VTH8642KMS-W, VTH8641KMS-WP, VTH2611L-WP, VTH2612L, VTH2612L-W, VTO0301R-W, VTO2111D-P-S3, VTO2211G-WP-S2, VTO2211G-P-S2, VTO6222E-P, VTO3222E-P, VTO4201F-P, VTO4201F-P1, VTO4202F-P1, VTO4202F-P-S3, VTO4202FB-P-S3, VTO4202FB-P1, VTO2201F-P-S2, VTO4201FB-P, VTO4201FB-P1, VTO2202F-P-S3, VTO6521F-S2, VTO6521H-S2, VTO6521H-D-S2, VTO6531H-S2, VTO6531F-S2, VTO6541H-S2, VTO6521K-S2, VTH5422HW, VTH5422HB, VTH5321GW-W, VTH5321GB-W, VTH5341G-W, VTH2421FW, VTH2421FB, VTH5421EW-H, VTH5441G, VTH5421EB-H, VTH5241DW-S2, VTH5221DW-S2, VTH5221DB-S2, VTH2421FW-P, VTH2421FB-P, VTO7531G-S3, VTO7541G-S3, VTO9541D-S3, VTO7631Q, VTO9631Q, VTO6631QS-WP, VTO6631QB-WP, ASI3103F-W, ASI3103F-MEW, ASI3103F-MEPW, DHI-TPC-BF5401, DHI-TPC-BF5601, DHI-TPC-BF5401-T",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Dahua, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0434\u043e\u0441\u0442\u0438\u0436\u0438\u043c\u044b\u043c \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0414\u043e\u0441\u0442\u0443\u043f\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f assert() (CWE-617)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Dahua \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0434\u043e\u0441\u0442\u0438\u0436\u0438\u043c\u044b\u043c \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0417\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-202606-001:-security-advisory-%E2%80%93-vulnerabilities-found-in-some-dahua-products\nhttps://materialfile.dahuasecurity.com/new_uploads_formal/soft/20260609/Affected_Models.pdf",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-617",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,7)"
}

CVE-2026-29116 (GCVE-0-2026-29116)

Vulnerability from cvelistv5 – Published: 2026-06-10 06:16 – Updated: 2026-06-10 14:50

Summary

A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpectedly, resulting in a denial of service.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-10 14:49 UTC

CWE

CWE-617

Assigner

dahua mitre root

References

1 reference

URL	Tags
https://www.dahuasecurity.com/about-dahua/trust-c…

Impacted products

1 product

Vendor	Product	Version
Dahua	IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC	Affected: Affected products are limited to certain models of IPC, SD, NVR, XVR, EVS, VTO, VTH, ASI, and TPC devices with versions built before March 26, 2026.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-29116",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-10T14:49:50.837129Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-10T14:50:16.179Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC",
          "vendor": "Dahua",
          "versions": [
            {
              "status": "affected",
              "version": "Affected products are limited to certain models of IPC, SD, NVR, XVR, EVS, VTO, VTH, ASI, and TPC devices with versions built before March 26, 2026."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA vulnerability has been found in some Dahua products could\nallow an unauthenticated remote attacker to send a specially crafted packet,\ntriggering an exception that causes the system to reboot unexpectedly,\nresulting in a denial of service.\u003c/p\u003e"
            }
          ],
          "value": "A vulnerability has been found in some Dahua products could\nallow an unauthenticated remote attacker to send a specially crafted packet,\ntriggering an exception that causes the system to reboot unexpectedly,\nresulting in a denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-617",
              "description": "CWE-617",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-10T06:16:34.173Z",
        "orgId": "79ee569e-7d1e-4364-98f0-3a18e2a739ad",
        "shortName": "dahua"
      },
      "references": [
        {
          "url": "https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-202606-001:-security-advisory-%E2%80%93-vulnerabilities-found-in-some-dahua-products"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "79ee569e-7d1e-4364-98f0-3a18e2a739ad",
    "assignerShortName": "dahua",
    "cveId": "CVE-2026-29116",
    "datePublished": "2026-06-10T06:16:34.173Z",
    "dateReserved": "2026-03-04T03:32:28.881Z",
    "dateUpdated": "2026-06-10T14:50:16.179Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.