1. Home
  2. CVE Database
  3. CVE-2020-9500
MEDIUM · 4.9

CVE-2020-9500

Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down.

Vulnerability Description

Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down.

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
DahuasecuritySd6Al Firmware< 2019-12
DahuasecuritySd6Al-
DahuasecuritySd5A Firmware< 2019-12
DahuasecuritySd5A-
DahuasecuritySd1A Firmware< 2019-12
DahuasecuritySd1A-
DahuasecurityPtz1A Firmware< 2019-12
DahuasecurityPtz1A-
DahuasecuritySd50 Firmware< 2019-12
DahuasecuritySd50-
DahuasecuritySd52C Firmware< 2019-12
DahuasecuritySd52C-
DahuasecurityIpc-Hx5842H Firmware< 2019-12
DahuasecurityIpc-Hx5842H-
DahuasecurityIpc-Hx7842H Firmware< 2019-12
DahuasecurityIpc-Hx7842H-
DahuasecurityIpc-Hx2Xxx Firmware< 2019-12
DahuasecurityIpc-Hx2Xxx-
DahuasecurityIpc-Hxxx5X4X Firmware< 2019-12
DahuasecurityIpc-Hxxx5X4X-

References

FAQ

What is CVE-2020-9500?

CVE-2020-9500 is a vulnerability with a CVSS score of 4.9 (MEDIUM). Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down.

How severe is CVE-2020-9500?

CVE-2020-9500 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-9500?

Check the references section above for vendor advisories and patch information. Affected products include: Dahuasecurity Sd6Al Firmware, Dahuasecurity Sd6Al, Dahuasecurity Sd5A Firmware, Dahuasecurity Sd5A, Dahuasecurity Sd1A Firmware.