Detections
Analytics
Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39948)
high Tenable OT Security Plugin ID 502844
Synopsis
The remote OT asset is affected by a vulnerability.Description
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
https://www.dahuasecurity.com/aboutUs/trustedCenter/details/768
Plugin Details
Severity: High
ID: 502844
Version: 1.1
Type: remote
Family: Tenable.ot
Published: 2/12/2025
Updated: 2/12/2025
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v3
Risk Factor: High
Base Score: 7.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Information
CPE: cpe:/o:dahuasecurity:nvr4x_firmware
Required KB Items: Tenable.ot/DahuaSecurity
Exploit Ease: No known exploits are available
Patch Publication Date: 7/31/2024
Vulnerability Publication Date: 7/31/2024
Reference Information
CVE: CVE-2024-39948
CWE: 20