Ukrainian cybersecurity researchers have warned that hackers are compromising Dahua internet-connected cameras and video recorders, changing their settings and creating unauthorized user accounts.
The vulnerability or weakness
The attacks are exploiting a feature called Easy4IP, which connects Dahua devices to the manufacturer's cloud service using serial numbers, even when the devices are protected by firewalls.
| CVE | CVSS | Severity | In CISA KEV | KEV due date |
|---|---|---|---|---|
| CVE-2021-33044 | 9.8 | CRITICAL | Yes, added 2024-08-21 | 2024-09-11 |
| CVE-2021-33045 | 9.8 | CRITICAL | Yes, added 2024-08-21 | 2024-09-11 |
CVE data: NVD (nvd.nist.gov) and the CISA Known Exploited Vulnerabilities catalog.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
Organizations using these cameras could face operational disruptions, data breaches, and potential legal liabilities if video feeds are compromised or misused. The reputation of businesses and government institutions could also be damaged by unauthorized access to surveillance footage.
Industries affected
Government institutions and military units, which use Chinese-made surveillance equipment, are particularly at risk.
Users affected
Users of Dahua surveillance cameras and video recorders may have their devices accessed without their knowledge, leading to unauthorized surveillance and potential privacy breaches.
