--- id: "CVE-2021-33044" kind: "vulnerability" aliases: ["CVE-2021-33044"] title: "The identity authentication bypass vulnerability found in some Dahua products during the login process" severity: "critical" cvss: 10.0 epss: null exploited: true status: "open" category: "infrastructure" products: [{"name": "Dahua IP Camera Firmware", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "dahuasecurity ipc-hum7xxx firmware", "fixed": ["2.820.0000000.5.r.210705"], "affected": "< 2.820.0000000.5.r.210705", "ecosystem": "vendor"}, {"name": "dahuasecurity ipc-hx3xxx firmware", "fixed": ["2.800.0000000.29.r.210630"], "affected": "< 2.800.0000000.29.r.210630", "ecosystem": "vendor"}, {"name": "dahuasecurity ipc-hx5xxx firmware", "fixed": ["2.820.0000000.18.r.210705"], "affected": "< 2.820.0000000.18.r.210705", "ecosystem": "vendor"}, {"name": "dahuasecurity sd1a1 firmware", "fixed": ["2.812.0000007.0.r.210706"], "affected": "< 2.812.0000007.0.r.210706", "ecosystem": "vendor"}, {"name": "dahuasecurity sd22 firmware", "fixed": ["2.812.0000007.0.r.210706"], "affected": "< 2.812.0000007.0.r.210706", "ecosystem": "vendor"}, {"name": "dahuasecurity sd49 firmware", "fixed": ["2.812.0000007.0.r.210706"], "affected": "< 2.812.0000007.0.r.210706", "ecosystem": "vendor"}, {"name": "dahuasecurity sd50 firmware", "fixed": ["2.812.0000007.0.r.210706"], "affected": "< 2.812.0000007.0.r.210706", "ecosystem": "vendor"}, {"name": "dahuasecurity sd52c firmware", "fixed": ["2.812.0000007.0.r.210706"], "affected": "< 2.812.0000007.0.r.210706", "ecosystem": "vendor"}, {"name": "dahuasecurity sd6al firmware", "fixed": ["2.812.0000007.0.r.210706"], "affected": "< 2.812.0000007.0.r.210706", "ecosystem": "vendor"}, {"name": "dahuasecurity tpc-bf1241 firmware", "fixed": ["2.630.0000000.6.r.210707"], "affected": "< 2.630.0000000.6.r.210707", "ecosystem": "vendor"}, {"name": "dahuasecurity tpc-bf2221 firmware", "fixed": ["2.630.0000000.10.r.210707"], "affected": "< 2.630.0000000.10.r.210707", "ecosystem": "vendor"}, {"name": "dahuasecurity tpc-bf5x01 firmware", "fixed": ["2.630.0000000.12.r.210707"], "affected": "< 2.630.0000000.12.r.210707", "ecosystem": "vendor"}, {"name": "dahuasecurity tpc-pt8x21b firmware", "fixed": ["2.630.0000000.10.r.210701"], "affected": "< 2.630.0000000.10.r.210701", "ecosystem": "vendor"}, {"name": "dahuasecurity tpc-sd2221 firmware", "fixed": [], "affected": "<= 2.630.0000000.7.r.210707", "ecosystem": "vendor"}, {"name": "dahuasecurity tpc-sd8x21 firmware", "fixed": ["2.630.0000000.9.r.210706"], "affected": "< 2.630.0000000.9.r.210706", "ecosystem": "vendor"}, {"name": "dahuasecurity vto-65xxx firmware", "fixed": ["4.300.0000004.0.r.210715"], "affected": "< 4.300.0000004.0.r.210715", "ecosystem": "vendor"}, {"name": "dahuasecurity vto-75x95x firmware", "fixed": ["4.300.0000003.0.r.210714"], "affected": "< 4.300.0000003.0.r.210714", "ecosystem": "vendor"}, {"name": "dahuasecurity vth-542xh firmware", "fixed": ["4.500.0000002.0.r.210715"], "affected": "< 4.500.0000002.0.r.210715", "ecosystem": "vendor"}, {"name": "dahuasecurity tpc-bf5x21 firmware", "fixed": ["2.630.0000000.8.r.210630"], "affected": "< 2.630.0000000.8.r.210630", "ecosystem": "vendor"}] ecosystems: ["vendor"] tags: ["dahua", "exploited", "infrastructure", "ip-camera", "self-hosted"] not_affected_if: ["no-dahua-cameras"] published_at: "2021-09-15T22:15:10+00:00" first_seen_at: "2026-10-23T19:11:51+00:00" updated_at: "2026-10-23T22:29:05+00:00" sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-33044", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33044", "first_seen_at": "2026-10-23T22:29:05+00:00"}] --- # The identity authentication bypass vulnerability found in some Dahua products during the login process Dahua IP camera firmware has an authentication bypass triggered by a NetKeyboard type argument sent during login. An attacker can get past authentication on the camera without valid credentials. _Summary, check and fix written by a model from the sources; labelled as such._ ## Affected - vendor:Dahua IP Camera Firmware affected ? fixed ? - vendor:dahuasecurity ipc-hum7xxx firmware affected < 2.820.0000000.5.r.210705 fixed 2.820.0000000.5.r.210705 - vendor:dahuasecurity ipc-hx3xxx firmware affected < 2.800.0000000.29.r.210630 fixed 2.800.0000000.29.r.210630 - vendor:dahuasecurity ipc-hx5xxx firmware affected < 2.820.0000000.18.r.210705 fixed 2.820.0000000.18.r.210705 - vendor:dahuasecurity sd1a1 firmware affected < 2.812.0000007.0.r.210706 fixed 2.812.0000007.0.r.210706 - vendor:dahuasecurity sd22 firmware affected < 2.812.0000007.0.r.210706 fixed 2.812.0000007.0.r.210706 - vendor:dahuasecurity sd49 firmware affected < 2.812.0000007.0.r.210706 fixed 2.812.0000007.0.r.210706 - vendor:dahuasecurity sd50 firmware affected < 2.812.0000007.0.r.210706 fixed 2.812.0000007.0.r.210706 - vendor:dahuasecurity sd52c firmware affected < 2.812.0000007.0.r.210706 fixed 2.812.0000007.0.r.210706 - vendor:dahuasecurity sd6al firmware affected < 2.812.0000007.0.r.210706 fixed 2.812.0000007.0.r.210706 - vendor:dahuasecurity tpc-bf1241 firmware affected < 2.630.0000000.6.r.210707 fixed 2.630.0000000.6.r.210707 - vendor:dahuasecurity tpc-bf2221 firmware affected < 2.630.0000000.10.r.210707 fixed 2.630.0000000.10.r.210707 - vendor:dahuasecurity tpc-bf5x01 firmware affected < 2.630.0000000.12.r.210707 fixed 2.630.0000000.12.r.210707 - vendor:dahuasecurity tpc-pt8x21b firmware affected < 2.630.0000000.10.r.210701 fixed 2.630.0000000.10.r.210701 - vendor:dahuasecurity tpc-sd2221 firmware affected <= 2.630.0000000.7.r.210707 fixed ? - vendor:dahuasecurity tpc-sd8x21 firmware affected < 2.630.0000000.9.r.210706 fixed 2.630.0000000.9.r.210706 - vendor:dahuasecurity vto-65xxx firmware affected < 4.300.0000004.0.r.210715 fixed 4.300.0000004.0.r.210715 - vendor:dahuasecurity vto-75x95x firmware affected < 4.300.0000003.0.r.210714 fixed 4.300.0000003.0.r.210714 - vendor:dahuasecurity vth-542xh firmware affected < 4.500.0000002.0.r.210715 fixed 4.500.0000002.0.r.210715 - vendor:dahuasecurity tpc-bf5x21 firmware affected < 2.630.0000000.8.r.210630 fixed 2.630.0000000.8.r.210630 ## Fix Apply the vendor mitigation per Dahua instructions, or stop using the affected camera if no mitigation exists (CISA required action). Affected and fixed firmware versions: unknown. ## Timeline - 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-33044 - 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2021-33044 ## From the sources Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the client during authentication. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. --- _Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_