CVE-2020-9502 Auth bypass in IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series,IPC-HFW1431S
Attackers can predict session IDs to hijack user sessions on Dahua IP cameras and NVRs, gaining unauthorized access to the devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-9502?
CVE-2020-9502 is a critical authentication bypass vulnerability in IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series,IPC-HFW1431S, published on 13 May 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device.
Weakness: CWE-330
Which versions are affected by CVE-2020-9502?
It affects 20 products.
Products include Dahuasecurity Ipc-Hdbw1320e-W Firmware, Dahuasecurity Ipc-Hx2xxx Firmware, Dahuasecurity Ipc-Hx5842h Firmware, Dahuasecurity Ipc-Hx7842h Firmware, Dahuasecurity Ipc-Hxxx5x4x Firmware, Dahuasecurity N42b1p Firmware and 14 more.
How do I fix CVE-2020-9502?
No fix has been published for CVE-2020-9502 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2020-9502 being exploited?
There is no known exploitation of CVE-2020-9502 in the wild and no public exploit code.
Other vulnerabilities in IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series,IPC-HFW1431S
Sources
Also known as GHSA-rqmc-r2j8-rwq3.