CVE-2024-39944

Summary

A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.

Affected Software

VendorProductVersion RangeStatus
DahuaIPC-HX8XXX and NVR4XXXIPC-HX8XXX and NVR4XXX Versions which Build time before 2024/2/2affected

Weaknesses

  • CWE-770: CWE-770 Allocation of Resources Without Limits or Throttling

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References