CVE-2019-9676

Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11. The vulnerability exits in the function of redirection display for serial port printing information, which can not be used by product basic functions. After an attacker logs in locally, this vulnerability can be exploited to cause device restart or arbitrary code execution. Dahua has identified the corresponding security problems in the static code auditing process, so it has gradually deleted this function, which is no longer available in the newer devices and softwares. Dahua has released versions of the affected products to fix the vulnerability.

• CWE-119

• https://www.dahuasecurity.com/support/cybersecurity/details/617Patch, Vendor Advisory
• https://www.dahuasecurity.com/support/cybersecurity/details/617Patch, Vendor Advisory

Published

Jun 12, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9668An issue was discovered in rovinbhandari FTP through 2012-03…7.5
• CVE-2019-9669The Wordfence plugin 7.2.3 for WordPress allows XSS via a un…
• CVE-2019-9670mailboxd component in Synacor Zimbra Collaboration Suite 8.7…9.8
• CVE-2019-9673Freenet 1483 has a MIME type bypass that allows arbitrary Ja…
• CVE-2019-9674Lib/zipfile.py in Python through 3.7.2 allows remote attacke…7.5
• CVE-2019-9675An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x b…
• CVE-2019-9677The specific fields of CGI interface of some Dahua products …9.8
• CVE-2019-9678Some Dahua products have the problem of denial of service du…7.5
• CVE-2019-9679Some of Dahua's Debug functions do not have permission separ…8.8
• CVE-2019-9680Some Dahua products have information leakage issues. Attacke…5.3
• CVE-2019-9681Online upgrade information in some firmware packages of Dahu…5.3
• CVE-2019-9682Dahua devices with Build time before December 2019 use stron…8.1