- How many CVEs does Dahua have?
- Dahua has 32 published CVE records since 2017, including 8 in the last two years.
- How many Dahua CVEs are in CISA KEV?
- Yes — 2 of Dahua's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which Dahua products have the most CVEs?
- The Dahua products with the most published CVEs are NVR4XXX, IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X, IPC, SD, Dahua Video Intercom devices.
- What are the most common weakness types in Dahua CVEs?
- Dahua's CVEs most often map to these CWE weakness types: CWE-617 (Reachable Assertion), CWE-121 (Stack-based Buffer Overflow), CWE-287 (Improper Authentication), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')).
- Are there public exploits for Dahua vulnerabilities?
- Yes — 6 of Dahua's CVEs have a known public exploit.
- How many critical Dahua vulnerabilities are there?
- Dahua has 7 critical and 13 high-severity CVEs.
- What is the average severity of Dahua CVEs?
- The average CVSS base score across Dahua's scored CVEs is 7.3.