Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2024-39944: Dahua Devices Can Crash with Malicious Network Data

CVE-2024-39944 · published 2 years ago

Summary

Dahua security cameras and other devices can be made to crash if they receive specific types of network traffic. This could cause loss of video feed and make the device unusable. Affected devices should be updated with the latest software to prevent this issue.

What to do

Update dahuasecurity nvr4104-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4116-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4104-p-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4108-p-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4108-8p-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4116-8p-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4104hs-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4108hs-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4104hs-p-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4108hs-p-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4108hs-8p-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4116hs-8p-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4204-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4208-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4216-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4204-p-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4208-8p-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4216-16p-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4232-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4232-16p-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4116hs-4ks2\/l_firmware to version 4.003.0000000.1.r.240515 or later.
Update dahuasecurity nvr4416-4ks2\/i_firmware to version 4.001.0000001.6.r.240725 or later.
Update dahuasecurity nvr4416-16p-4ks2\/i_firmware to version 4.001.0000001.6.r.240725 or later.
Update dahuasecurity nvr4432-16p-4ks2\/i_firmware to version 4.001.0000001.6.r.240725 or later.
Update dahuasecurity nvr4816-4ks2\/i_firmware to version 4.001.0000001.6.r.240725 or later.
Update dahuasecurity nvr4816-16p-4ks2\/i_firmware to version 4.001.0000001.6.r.240725 or later.
Update dahuasecurity nvr4832-4ks2\/i_firmware to version 4.001.0000001.6.r.240725 or later.
Update dahuasecurity nvr4832-16p-4ks2\/i_firmware to version 4.001.0000001.6.r.240725 or later.
Update dahuasecurity nvr4432-4ks2\/i_firmware to version 4.001.0000001.6.r.240725 or later.
Update dahuasecurity nvr4232-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4232-16p-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4216-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4216-16p-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4208-8p-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4208-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4204-p-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4204-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4116hs-8p-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4116hs-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4108hs-p-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4108hs-8p-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4108hs-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4104hs-p-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4104hs-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4116-8p-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4116-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4108-p-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4104-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4108-8p-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4108-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4104-p-4ks3_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4104hs-p-4ks3\(960g\)_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4104hs-4ks3\(960g\)_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4108hs-4ks3\(960g\)_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity nvr4104-p-4ks3\(960g\)_firmware to version 4.003.0000000.0.r.240312 or later.
Update dahuasecurity ipc-hfs8849g-z3-led_firmware to version 3.140.0000000.30.r.240725 or later.
Update dahuasecurity ipc-hfs8449g-z7-led_firmware to version 3.140.0000000.30.r.240725 or later.

Affected software

Vendor	Product	Affected versions
dahuasecurity	nvr4104-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4104-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4108-4ks2\/l_firmware	4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4108-4ks2\/l_firmware:4.003.0000000.1.r.240515:::::::*`
dahuasecurity	nvr4116-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4116-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4104-p-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4104-p-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4108-p-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4108-p-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4108-8p-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4108-8p-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4116-8p-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4116-8p-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4104hs-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4104hs-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4108hs-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4108hs-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4104hs-p-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4104hs-p-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4108hs-p-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4108hs-p-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4108hs-8p-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4108hs-8p-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4116hs-8p-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4116hs-8p-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4204-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4204-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4208-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4208-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4216-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4216-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4204-p-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4204-p-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4208-8p-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4208-8p-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4216-16p-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4216-16p-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4232-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4232-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4232-16p-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4232-16p-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4116hs-4ks2\/l_firmware	< 4.003.0000000.1.r.240515 `cpe:2.3:o:dahuasecurity:nvr4116hs-4ks2\/l_firmware::::::::`
dahuasecurity	nvr4416-4ks2\/i_firmware	< 4.001.0000001.6.r.240725 `cpe:2.3:o:dahuasecurity:nvr4416-4ks2\/i_firmware::::::::`
dahuasecurity	nvr4416-16p-4ks2\/i_firmware	< 4.001.0000001.6.r.240725 `cpe:2.3:o:dahuasecurity:nvr4416-16p-4ks2\/i_firmware::::::::`
dahuasecurity	nvr4432-16p-4ks2\/i_firmware	< 4.001.0000001.6.r.240725 `cpe:2.3:o:dahuasecurity:nvr4432-16p-4ks2\/i_firmware::::::::`
dahuasecurity	nvr4816-4ks2\/i_firmware	< 4.001.0000001.6.r.240725 `cpe:2.3:o:dahuasecurity:nvr4816-4ks2\/i_firmware::::::::`
dahuasecurity	nvr4816-16p-4ks2\/i_firmware	< 4.001.0000001.6.r.240725 `cpe:2.3:o:dahuasecurity:nvr4816-16p-4ks2\/i_firmware::::::::`
dahuasecurity	nvr4832-4ks2\/i_firmware	< 4.001.0000001.6.r.240725 `cpe:2.3:o:dahuasecurity:nvr4832-4ks2\/i_firmware::::::::`
dahuasecurity	nvr4832-16p-4ks2\/i_firmware	< 4.001.0000001.6.r.240725 `cpe:2.3:o:dahuasecurity:nvr4832-16p-4ks2\/i_firmware::::::::`
dahuasecurity	nvr4432-4ks2\/i_firmware	< 4.001.0000001.6.r.240725 `cpe:2.3:o:dahuasecurity:nvr4432-4ks2\/i_firmware::::::::`
dahuasecurity	nvr4232-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4232-4ks3_firmware::::::::`
dahuasecurity	nvr4232-16p-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4232-16p-4ks3_firmware::::::::`
dahuasecurity	nvr4216-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4216-4ks3_firmware::::::::`
dahuasecurity	nvr4216-16p-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4216-16p-4ks3_firmware::::::::`
dahuasecurity	nvr4208-8p-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4208-8p-4ks3_firmware::::::::`
dahuasecurity	nvr4208-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4208-4ks3_firmware::::::::`
dahuasecurity	nvr4204-p-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4204-p-4ks3_firmware::::::::`
dahuasecurity	nvr4204-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4204-4ks3_firmware::::::::`
dahuasecurity	nvr4116hs-8p-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4116hs-8p-4ks3_firmware::::::::`
dahuasecurity	nvr4116hs-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4116hs-4ks3_firmware::::::::`
dahuasecurity	nvr4108hs-p-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4108hs-p-4ks3_firmware::::::::`
dahuasecurity	nvr4108hs-8p-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4108hs-8p-4ks3_firmware::::::::`
dahuasecurity	nvr4108hs-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4108hs-4ks3_firmware::::::::`
dahuasecurity	nvr4104hs-p-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4104hs-p-4ks3_firmware::::::::`
dahuasecurity	nvr4104hs-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4104hs-4ks3_firmware::::::::`
dahuasecurity	nvr4116-8p-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4116-8p-4ks3_firmware::::::::`
dahuasecurity	nvr4116-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4116-4ks3_firmware::::::::`
dahuasecurity	nvr4108-p-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4108-p-4ks3_firmware::::::::`
dahuasecurity	nvr4104-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4104-4ks3_firmware::::::::`
dahuasecurity	nvr4108-8p-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4108-8p-4ks3_firmware::::::::`

Showing 50 of 58. Show the rest

Vendor	Product	Affected versions
dahuasecurity	nvr4108-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4108-4ks3_firmware::::::::`
dahuasecurity	nvr4104-p-4ks3_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4104-p-4ks3_firmware::::::::`
dahuasecurity	nvr4104hs-p-4ks3\(960g\)_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4104hs-p-4ks3\(960g\)_firmware::::::::`
dahuasecurity	nvr4104hs-4ks3\(960g\)_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4104hs-4ks3\(960g\)_firmware::::::::`
dahuasecurity	nvr4108hs-4ks3\(960g\)_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4108hs-4ks3\(960g\)_firmware::::::::`
dahuasecurity	nvr4104-p-4ks3\(960g\)_firmware	< 4.003.0000000.0.r.240312 `cpe:2.3:o:dahuasecurity:nvr4104-p-4ks3\(960g\)_firmware::::::::`
dahuasecurity	ipc-hfs8849g-z3-led_firmware	< 3.140.0000000.30.r.240725 `cpe:2.3:o:dahuasecurity:ipc-hfs8849g-z3-led_firmware::::::::`
dahuasecurity	ipc-hfs8449g-z7-led_firmware	< 3.140.0000000.30.r.240725 `cpe:2.3:o:dahuasecurity:ipc-hfs8449g-z7-led_firmware::::::::`

Original advisory text

A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.

A vulnerability has been found in Dahua products.Attackers
can send carefully crafted data packets to the interface with vulnerabilities,
causing the device to crash.

References

https://www.dahuasecurity.com/aboutUs/trustedCenter/details/768 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker partial control

Severity

7.5 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-770Allocation of Resources Without Limits

CWE-20Improper Input Validation

Timeline

Published31 Jul 2024

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2024-39944 · NVD

Track software like this

Free during beta