{"id":"CVE-2021-33044","kind":"vulnerability","aliases":["CVE-2021-33044"],"related":[],"title":"The identity authentication bypass vulnerability found in some Dahua products during the login process","description":"Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the client during authentication.\n\nCISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","summary":"Dahua IP camera firmware has an authentication bypass triggered by a NetKeyboard type argument sent during login. An attacker can get past authentication on the camera without valid credentials.","severity":"critical","cvss":10.0,"epss":null,"exploited":true,"exploited_at":"2024-08-21T00:00:00+00:00","products":[{"name":"Dahua IP Camera Firmware","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"dahuasecurity ipc-hum7xxx firmware","fixed":["2.820.0000000.5.r.210705"],"affected":"< 2.820.0000000.5.r.210705","ecosystem":"vendor"},{"name":"dahuasecurity ipc-hx3xxx firmware","fixed":["2.800.0000000.29.r.210630"],"affected":"< 2.800.0000000.29.r.210630","ecosystem":"vendor"},{"name":"dahuasecurity ipc-hx5xxx firmware","fixed":["2.820.0000000.18.r.210705"],"affected":"< 2.820.0000000.18.r.210705","ecosystem":"vendor"},{"name":"dahuasecurity sd1a1 firmware","fixed":["2.812.0000007.0.r.210706"],"affected":"< 2.812.0000007.0.r.210706","ecosystem":"vendor"},{"name":"dahuasecurity sd22 firmware","fixed":["2.812.0000007.0.r.210706"],"affected":"< 2.812.0000007.0.r.210706","ecosystem":"vendor"},{"name":"dahuasecurity sd49 firmware","fixed":["2.812.0000007.0.r.210706"],"affected":"< 2.812.0000007.0.r.210706","ecosystem":"vendor"},{"name":"dahuasecurity sd50 firmware","fixed":["2.812.0000007.0.r.210706"],"affected":"< 2.812.0000007.0.r.210706","ecosystem":"vendor"},{"name":"dahuasecurity sd52c firmware","fixed":["2.812.0000007.0.r.210706"],"affected":"< 2.812.0000007.0.r.210706","ecosystem":"vendor"},{"name":"dahuasecurity sd6al firmware","fixed":["2.812.0000007.0.r.210706"],"affected":"< 2.812.0000007.0.r.210706","ecosystem":"vendor"},{"name":"dahuasecurity tpc-bf1241 firmware","fixed":["2.630.0000000.6.r.210707"],"affected":"< 2.630.0000000.6.r.210707","ecosystem":"vendor"},{"name":"dahuasecurity tpc-bf2221 firmware","fixed":["2.630.0000000.10.r.210707"],"affected":"< 2.630.0000000.10.r.210707","ecosystem":"vendor"},{"name":"dahuasecurity tpc-bf5x01 firmware","fixed":["2.630.0000000.12.r.210707"],"affected":"< 2.630.0000000.12.r.210707","ecosystem":"vendor"},{"name":"dahuasecurity tpc-pt8x21b firmware","fixed":["2.630.0000000.10.r.210701"],"affected":"< 2.630.0000000.10.r.210701","ecosystem":"vendor"},{"name":"dahuasecurity tpc-sd2221 firmware","fixed":[],"affected":"<= 2.630.0000000.7.r.210707","ecosystem":"vendor"},{"name":"dahuasecurity tpc-sd8x21 firmware","fixed":["2.630.0000000.9.r.210706"],"affected":"< 2.630.0000000.9.r.210706","ecosystem":"vendor"},{"name":"dahuasecurity vto-65xxx firmware","fixed":["4.300.0000004.0.r.210715"],"affected":"< 4.300.0000004.0.r.210715","ecosystem":"vendor"},{"name":"dahuasecurity vto-75x95x firmware","fixed":["4.300.0000003.0.r.210714"],"affected":"< 4.300.0000003.0.r.210714","ecosystem":"vendor"},{"name":"dahuasecurity vth-542xh firmware","fixed":["4.500.0000002.0.r.210715"],"affected":"< 4.500.0000002.0.r.210715","ecosystem":"vendor"},{"name":"dahuasecurity tpc-bf5x21 firmware","fixed":["2.630.0000000.8.r.210630"],"affected":"< 2.630.0000000.8.r.210630","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["dahua","exploited","infrastructure","ip-camera","self-hosted"],"not_affected_if":["no-dahua-cameras"],"how_to_check":null,"fix":"Apply the vendor mitigation per Dahua instructions, or stop using the affected camera if no mitigation exists (CISA required action). Affected and fixed firmware versions: unknown.","status":"open","published_at":"2021-09-15T22:15:10+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:58:21+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T20:58:21Z","model":"claude-haiku-5-5","output":{"fix":"Apply the vendor mitigation per Dahua instructions, or stop using the affected camera if no mitigation exists (CISA required action). Affected and fixed firmware versions: unknown.","reach":"network","impact":"high","summary":"Dahua IP camera firmware has an authentication bypass triggered by a NetKeyboard type argument sent during login. An attacker can get past authentication on the camera without valid credentials.","category":"infrastructure","who_cares":["dahua","ip-camera","self-hosted"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker bypasses camera login and controls the device without credentials","analyst_note":"Find Dahua's advisory and list of affected firmware models and fixed versions; check CISA KEV entry for due date and mitigation details.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["no-dahua-cameras"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000459,"input_tokens":2819,"output_tokens":355,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2021':16A,19A '-33044':17A,20A '542xh':101A '65xxx':91A '75x95x':96A 'action':171C 'appli':172C 'argument':130B,161C 'attack':135B 'authent':3A,123B,139B,154C,168C 'bf1241':61A 'bf2221':66A 'bf5x01':71A 'bf5x21':106A 'bypass':4A,124B,155C 'camera':23A,113B,119B,142B,148C 'cisa':169C 'client':166C 'contain':152C 'credenti':145B 'cve':15A,18A 'dahua':9A,21A,108B,117B,146C 'dahuasecurity':25A,30A,35A,40A,43A,46A,49A,52A,55A,58A,63A,68A,73A,78A,83A,88A,93A,98A,103A 'discontinu':178C 'exploit':109B 'firmwar':120B 'firmware':24A,29A,34A,39A,42A,45A,48A,51A,54A,57A,62A,67A,72A,77A,82A,87A,92A,97A,102A,107A 'found':6A 'get':137B 'host':116B 'hum7xxx':28A 'hx3xxx':33A 'hx5xxx':38A 'ident':2A 'infrastructur':110B 'instruct':176C 'ip':22A,112B,118B,147C 'ip-camera':111B 'ipc':27A,32A,37A 'ipc-hum7xxx':26A 'ipc-hx3xxx':31A 'ipc-hx5xxx':36A 'login':13A,133B 'mitig':173C,184C 'netkeyboard':128B,159C 'past':138B 'per':174C 'process':14A 'product':10A,151C,182C 'pt8x21b':76A 'relat':150C 'requir':170C 'sd1a1':41A 'sd22':44A 'sd2221':81A 'sd49':47A 'sd50':50A 'sd52c':53A 'sd6al':56A 'sd8x21':86A 'self':115B 'self-host':114B 'sent':131B 'specifi':163C 'tpc':60A,65A,70A,75A,80A,85A,105A 'tpc-bf1241':59A 'tpc-bf2221':64A 'tpc-bf5x01':69A 'tpc-bf5x21':104A 'tpc-pt8x21b':74A 'tpc-sd2221':79A 'tpc-sd8x21':84A 'trigger':125B 'type':129B,160C 'unavail':186C 'use':179C 'valid':144B 'vendor':175C 'vth':100A 'vth-542xh':99A 'vto':90A,95A 'vto-65xxx':89A 'vto-75x95x':94A 'vulner':5A,156C 'without':143B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2021-09-15T22:15:10+00:00","kev":{"dateAdded":"2024-08-21","dueDate":"2024-09-11","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2021-33044","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-33044","severity":null,"published_at":"2024-08-21T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T12:39:22+00:00","note":null},{"source":"nvd","external_id":"CVE-2021-33044","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33044","severity":null,"published_at":"2021-09-15T22:15:10+00:00","modified_at":"2026-06-17T03:54:03+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}