CVE-2019-9682

Name: CVE-2019-9682
Creator: NVD / NIST
Published: 2020-05-13T16:15:12.87+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 8.1/10EPSS 0.86%

Last modified Jun 17, 2026

CVE-2019-9682 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. EPSS estimates a 0.86% chance of exploitation in the next 30 days.

Description

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker can monitor the device network to intercept network packets to attack the device. So it is recommended that the user disable this login method.

Metrics

CVSS 3.1

8.1/10

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

0.86%

53.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-276

Affected Software

Vendor	Product	Versions
Dahuasecurity	Sd6al Firmware	< 2019-12
Dahuasecurity	Sd5a Firmware	< 2019-12
Dahuasecurity	Sd1a Firmware	< 2019-12
Dahuasecurity	Ptz1a Firmware	< 2019-12
Dahuasecurity	Sd50 Firmware	< 2019-12
Dahuasecurity	Sd52c Firmware	< 2019-12
Dahuasecurity	Ipc-Hx5842h Firmware	< 2019-12
Dahuasecurity	Ipc-Hx7842h Firmware	< 2019-12
Dahuasecurity	Ipc-Hx2xxx Firmware	< 2019-12
Dahuasecurity	Ipc-Hxxx5x4x Firmware	< 2019-12
Dahuasecurity	N42b1p Firmware	< 2019-12
Dahuasecurity	N42b2p Firmware	< 2019-12
Dahuasecurity	N42b3p Firmware	< 2019-12
Dahuasecurity	N52a4p Firmware	< 2019-12
Dahuasecurity	N54a4p Firmware	< 2019-12
Dahuasecurity	N52b2p Firmware	< 2019-12
Dahuasecurity	N52b5p Firmware	< 2019-12
Dahuasecurity	N52b3p Firmware	< 2019-12
Dahuasecurity	N54b2p Firmware	< 2019-12
Dahuasecurity	Ipc-Hdbw1320e-W Firmware	< 2019-12

References

https://www.dahuasecurity.com/support/cybersecurity/details/767Vendor Advisory
https://www.dahuasecurity.com/support/cybersecurity/details/767Vendor Advisory

Timeline

Published: May 13, 2020
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-9682?

How severe is CVE-2019-9682?

CVE-2019-9682 has a CVSS score of 8.1/10 (HIGH severity). The EPSS model estimates a 0.86% probability of exploitation in the next 30 days.

How do I fix CVE-2019-9682?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-9682?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST