Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-3948
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX V2.640.0000000.2.R and V2.623.0000000.1.R, Dahua NVR5XX-4KS2 V3.216.0000006.0.R, Dahua NVR4XXX-4KS2 V3.216.0000006.0.R, and NVR2XXX-4KS2 do not require authentication to access the HTTP endpoint /videotalk. An unauthenticated, remote person can connect to this endpoint and potentionally listen to the audio of the capturing device.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Amcrest IP2M-841B 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Amcrest IP2M-841B是Amcrest公司的一款IP摄像机。 使用2.520.AC00.18.R版本固件的Amcrest IP2M-841B中存在授权问题漏洞,该漏洞在访问HTTP端点/视频通话时,程序没有要求进行身份验证。远程攻击者可利用该漏洞连接到该端点并监听摄像头所录制的音频。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
-Dahua IPC-XXBXX V2.622.0000000.9.R -
-Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R -
-Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R -
-Dahua DH-SD4XXXXX V2.623.0000000.7.R -
-Dahua DH-SD5XXXXX V2.623.0000000.1.R -
-Dahua DH-SD6XXXXX V2.640.0000000.2.R and V2.623.0000000.1.R -
-Dahua NVR5XX-4KS2 V3.216.0000006.0.R -
-Dahua NVR4XXX-4KS2 V3.216.0000006.0.R and NVR2XXX-4KS2 -
II. Public POCs for CVE-2019-3948
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2019-3948
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2019-3948

No comments yet


Leave a comment