Live › vulnerability › CVE-2021-33044
Go to dashboardDahua IP camera firmware has an authentication bypass triggered by a NetKeyboard type argument sent during login. An attacker can get past authentication on the camera without valid credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Dahua IP Camera Firmware | vendor | – | – |
| dahuasecurity ipc-hum7xxx firmware | vendor | < 2.820.0000000.5.r.210705 | 2.820.0000000.5.r.210705 |
| dahuasecurity ipc-hx3xxx firmware | vendor | < 2.800.0000000.29.r.210630 | 2.800.0000000.29.r.210630 |
| dahuasecurity ipc-hx5xxx firmware | vendor | < 2.820.0000000.18.r.210705 | 2.820.0000000.18.r.210705 |
| dahuasecurity sd1a1 firmware | vendor | < 2.812.0000007.0.r.210706 | 2.812.0000007.0.r.210706 |
| dahuasecurity sd22 firmware | vendor | < 2.812.0000007.0.r.210706 | 2.812.0000007.0.r.210706 |
| dahuasecurity sd49 firmware | vendor | < 2.812.0000007.0.r.210706 | 2.812.0000007.0.r.210706 |
| dahuasecurity sd50 firmware | vendor | < 2.812.0000007.0.r.210706 | 2.812.0000007.0.r.210706 |
| dahuasecurity sd52c firmware | vendor | < 2.812.0000007.0.r.210706 | 2.812.0000007.0.r.210706 |
| dahuasecurity sd6al firmware | vendor | < 2.812.0000007.0.r.210706 | 2.812.0000007.0.r.210706 |
| dahuasecurity tpc-bf1241 firmware | vendor | < 2.630.0000000.6.r.210707 | 2.630.0000000.6.r.210707 |
| dahuasecurity tpc-bf2221 firmware | vendor | < 2.630.0000000.10.r.210707 | 2.630.0000000.10.r.210707 |
| dahuasecurity tpc-bf5x01 firmware | vendor | < 2.630.0000000.12.r.210707 | 2.630.0000000.12.r.210707 |
| dahuasecurity tpc-pt8x21b firmware | vendor | < 2.630.0000000.10.r.210701 | 2.630.0000000.10.r.210701 |
| dahuasecurity tpc-sd2221 firmware | vendor | <= 2.630.0000000.7.r.210707 | – |
| dahuasecurity tpc-sd8x21 firmware | vendor | < 2.630.0000000.9.r.210706 | 2.630.0000000.9.r.210706 |
| dahuasecurity vto-65xxx firmware | vendor | < 4.300.0000004.0.r.210715 | 4.300.0000004.0.r.210715 |
| dahuasecurity vto-75x95x firmware | vendor | < 4.300.0000003.0.r.210714 | 4.300.0000003.0.r.210714 |
| dahuasecurity vth-542xh firmware | vendor | < 4.500.0000002.0.r.210715 | 4.500.0000002.0.r.210715 |
| dahuasecurity tpc-bf5x21 firmware | vendor | < 2.630.0000000.8.r.210630 | 2.630.0000000.8.r.210630 |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the client during authentication.
CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2021-33044")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.