NVD Vulnerability Detail
Search Exploit, PoC
CVE-2024-39950
Summary

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization.

Publication Date July 31, 2024, 1:15 p.m.
Registration Date Aug. 1, 2024, 10:01 a.m.
Last Update Aug. 20, 2024, 1:15 a.m.
CVSS3.1 : CRITICAL
スコア 9.8
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
攻撃元区分(AV) ネットワーク
攻撃条件の複雑さ(AC) 低
攻撃に必要な特権レベル(PR) 不要
利用者の関与(UI) 不要
影響の想定範囲(S) 変更なし
機密性への影響(C) 高
完全性への影響(I) 高
可用性への影響(A) 高
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4104-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4104-4ks2\/l:-:*:*:*:*:*:*:*
Configuration2 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4108-4ks2\/l_firmware:4.003.0000000.1.r.240515:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4108-4ks2\/l:-:*:*:*:*:*:*:*
Configuration3 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4116-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4116-4ks2\/l:-:*:*:*:*:*:*:*
Configuration4 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4104-p-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4104-p-4ks2\/l:-:*:*:*:*:*:*:*
Configuration5 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4108-p-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4108-p-4ks2\/l:-:*:*:*:*:*:*:*
Configuration6 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4108-8p-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4108-8p-4ks2\/l:-:*:*:*:*:*:*:*
Configuration7 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4116-8p-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4116-8p-4ks2\/l:-:*:*:*:*:*:*:*
Configuration8 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4104hs-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4104hs-4ks2\/l:-:*:*:*:*:*:*:*
Configuration9 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4108hs-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4108hs-4ks2\/l:-:*:*:*:*:*:*:*
Configuration10 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4104hs-p-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4104hs-p-4ks2\/l:-:*:*:*:*:*:*:*
Configuration11 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4108hs-p-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4108hs-p-4ks2\/l:-:*:*:*:*:*:*:*
Configuration12 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4108hs-8p-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4108hs-8p-4ks2\/l:-:*:*:*:*:*:*:*
Configuration13 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4116hs-8p-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4116hs-8p-4ks2\/l:-:*:*:*:*:*:*:*
Configuration14 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4204-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4204-4ks2\/l:-:*:*:*:*:*:*:*
Configuration15 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4208-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4208-4ks2\/l:-:*:*:*:*:*:*:*
Configuration16 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4216-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4216-4ks2\/l:-:*:*:*:*:*:*:*
Configuration17 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4204-p-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4204-p-4ks2\/l:-:*:*:*:*:*:*:*
Configuration18 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4208-8p-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4208-8p-4ks2\/l:-:*:*:*:*:*:*:*
Configuration19 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4216-16p-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4216-16p-4ks2\/l:-:*:*:*:*:*:*:*
Configuration20 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4232-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4232-4ks2\/l:-:*:*:*:*:*:*:*
Configuration21 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4232-16p-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4232-16p-4ks2\/l:-:*:*:*:*:*:*:*
Configuration22 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4116hs-4ks2\/l_firmware:*:*:*:*:*:*:*:* 4.003.0000000.1.r.240515
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4116hs-4ks2\/l:-:*:*:*:*:*:*:*
Configuration23 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4416-4ks2\/i_firmware:*:*:*:*:*:*:*:* 4.001.0000001.6.r.240725
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4416-4ks2\/i:-:*:*:*:*:*:*:*
Configuration24 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4416-16p-4ks2\/i_firmware:*:*:*:*:*:*:*:* 4.001.0000001.6.r.240725
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4416-16p-4ks2\/i:-:*:*:*:*:*:*:*
Configuration25 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4432-16p-4ks2\/i_firmware:*:*:*:*:*:*:*:* 4.001.0000001.6.r.240725
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4432-16p-4ks2\/i:-:*:*:*:*:*:*:*
Configuration26 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4816-4ks2\/i_firmware:*:*:*:*:*:*:*:* 4.001.0000001.6.r.240725
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4816-4ks2\/i:-:*:*:*:*:*:*:*
Configuration27 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4816-16p-4ks2\/i_firmware:*:*:*:*:*:*:*:* 4.001.0000001.6.r.240725
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4816-16p-4ks2\/i:-:*:*:*:*:*:*:*
Configuration28 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4832-4ks2\/i_firmware:*:*:*:*:*:*:*:* 4.001.0000001.6.r.240725
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4832-4ks2\/i:-:*:*:*:*:*:*:*
Configuration29 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4832-16p-4ks2\/i_firmware:*:*:*:*:*:*:*:* 4.001.0000001.6.r.240725
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4832-16p-4ks2\/i:-:*:*:*:*:*:*:*
Configuration30 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4432-4ks2\/i_firmware:*:*:*:*:*:*:*:* 4.001.0000001.6.r.240725
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4432-4ks2\/i:-:*:*:*:*:*:*:*
Configuration31 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4232-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4232-4ks3:-:*:*:*:*:*:*:*
Configuration32 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4232-16p-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4232-16p-4ks3:-:*:*:*:*:*:*:*
Configuration33 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4216-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4216-4ks3:-:*:*:*:*:*:*:*
Configuration34 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4216-16p-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4216-16p-4ks3:-:*:*:*:*:*:*:*
Configuration35 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4208-8p-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4208-8p-4ks3:-:*:*:*:*:*:*:*
Configuration36 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4208-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4208-4ks3:-:*:*:*:*:*:*:*
Configuration37 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4204-p-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4204-p-4ks3:-:*:*:*:*:*:*:*
Configuration38 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4204-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4204-4ks3:-:*:*:*:*:*:*:*
Configuration39 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4116hs-8p-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4116hs-8p-4ks3:-:*:*:*:*:*:*:*
Configuration40 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4116hs-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4116hs-4ks3:-:*:*:*:*:*:*:*
Configuration41 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4108hs-p-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4108hs-p-4ks3:-:*:*:*:*:*:*:*
Configuration42 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4108hs-8p-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4108hs-8p-4ks3:-:*:*:*:*:*:*:*
Configuration43 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4108hs-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4108hs-4ks3:-:*:*:*:*:*:*:*
Configuration44 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4104hs-p-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4104hs-p-4ks3:-:*:*:*:*:*:*:*
Configuration45 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4104hs-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4104hs-4ks3:-:*:*:*:*:*:*:*
Configuration46 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4116-8p-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4116-8p-4ks3:-:*:*:*:*:*:*:*
Configuration47 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4116-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4116-4ks3:-:*:*:*:*:*:*:*
Configuration48 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4108-p-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4108-p-4ks3:-:*:*:*:*:*:*:*
Configuration49 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4104-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4104-4ks3:-:*:*:*:*:*:*:*
Configuration50 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4108-8p-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4108-8p-4ks3:-:*:*:*:*:*:*:*
Configuration51 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4108-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4108-4ks3:-:*:*:*:*:*:*:*
Configuration52 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4104-p-4ks3_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4104-p-4ks3:-:*:*:*:*:*:*:*
Configuration53 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4104hs-p-4ks3\(960g\)_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4104hs-p-4ks3\(960g\):-:*:*:*:*:*:*:*
Configuration54 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4104hs-4ks3\(960g\)_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4104hs-4ks3\(960g\):-:*:*:*:*:*:*:*
Configuration55 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4108hs-4ks3\(960g\)_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4108hs-4ks3\(960g\):-:*:*:*:*:*:*:*
Configuration56 or higher or less more than less than
cpe:2.3:o:dahuasecurity:nvr4104-p-4ks3\(960g\)_firmware:*:*:*:*:*:*:*:* 4.003.0000000.0.r.240312
execution environment
1 cpe:2.3:h:dahuasecurity:nvr4104-p-4ks3\(960g\):-:*:*:*:*:*:*:*
Configuration57 or higher or less more than less than
cpe:2.3:o:dahuasecurity:ipc-hfs8849g-z3-led_firmware:*:*:*:*:*:*:*:* 3.140.0000000.30.r.240725
execution environment
1 cpe:2.3:h:dahuasecurity:ipc-hfs8849g-z3-led:-:*:*:*:*:*:*:*
Configuration58 or higher or less more than less than
cpe:2.3:o:dahuasecurity:ipc-hfs8449g-z7-led_firmware:*:*:*:*:*:*:*:* 3.140.0000000.30.r.240725
execution environment
1 cpe:2.3:h:dahuasecurity:ipc-hfs8449g-z7-led:-:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List
JVN Vulnerability Information
複数の Dahua Technology Co., Ltd 製品における脆弱性
Title 複数の Dahua Technology Co., Ltd 製品における脆弱性
Summary

nvr4104-4ks2/l ファームウェア、nvr4108-4ks2/l ファームウェア、nvr4116-4ks2/l ファームウェア等複数の Dahua Technology Co., Ltd 製品には、不特定の脆弱性が存在します。

Possible impacts 情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution

ベンダアドバイザリまたはパッチ情報が公開されています。参考情報を参照して適切な対策を実施してください。
Publication Date July 31, 2024, midnight
Registration Date Aug. 21, 2024, 12:41 p.m.
Last Update Nov. 21, 2024, 12:02 p.m.
Affected System
Dahua Technology Co., Ltd
nvr4104-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4104-p-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4104hs-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4104hs-p-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4108-4ks2/l ファームウェア 4.003.0000000.1.r.240515
nvr4108-8p-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4108-p-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4108hs-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4108hs-8p-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4108hs-p-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4116-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4116-8p-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4116hs-8p-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4204-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4204-p-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4208-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4208-8p-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4216-16p-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4216-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
nvr4232-4ks2/l ファームウェア 4.003.0000000.1.r.240515 未満
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
その他
Change Log
No Changed Details Date of change
1 [2024年08月21日]
  掲載		 Aug. 21, 2024, 12:41 p.m.
2 [2024年11月21日]
  参考情報：JVN (JVNVU#99607268) を追加		 Nov. 21, 2024, 11:45 a.m.