Description
A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
References (4)
Scores
CVSS v3
4.3
EPSS
0.0018
EPSS Percentile
39.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-23
CWE-24
Status
published
Products (4)
Dahua/IPC-HDW1200S
20241222
Dahua/IPC-HFW1200S
20241222
Dahua/IPC-HFW2300R-Z
20241222
Dahua/IPC-HFW5220E-Z
20241222
Published
Jan 05, 2025
Tracked Since
Feb 18, 2026