Threat IntelligenceBleeping Computer
9.8 — CRITICAL
Hackers compromise 14,500 Dahua web cameras in 35-day campaign
In a large-scale campaign that researchers dubbed CameraSwarm, hackers compromised more than 14,500 Dahua IP cameras mostly in Ukraine and Russia. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Hackers exploited vulnerabilities in Dahua IP cameras, compromising over 14,500 devices through brute-forcing, exploiting CVE-2021-33044 and CVE-2021-33045, and using cloud-relay attacks, resulting in potential data breaches.
⚙️Technical Details
CVEs
CVE-2021-33044CVE-2021-33045CVE-2024-39943CVE-2025-31702
Affected Systems
Dahuasecurity Ipc-Hum7XxxDahuasecurity Ipc-Hum7Xxx FirmwareDahuasecurity Ipc-Hx3XxxDahuasecurity Ipc-Hx3Xxx FirmwareDahuasecurity Ipc-Hx5Xxx
Attack Vectors
NETWORKNETWORKNETWORK
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Users of Dahua IP cameras, particularly those in Ukraine and Russia
🛡️Recommended Actions
1Disable P2P when not needed
2Apply Dahua SA-2021-0130 firmware updates for CVE-2021-33044 and CVE-2021-33045, or a later firmware version
3Remove 'p2pwn' accounts from compromised cameras
📦Affected Products
Dahuasecurity Ipc-Hum7XxxDahuasecurity Ipc-Hum7Xxx FirmwareDahuasecurity Ipc-Hx3XxxDahuasecurity Ipc-Hx3Xxx FirmwareDahuasecurity Ipc-Hx5XxxDahuasecurity Ipc-Hx5Xxx FirmwareDahuasecurity Sd1A1Dahuasecurity Sd1A1 FirmwareDahuasecurity Sd22Dahuasecurity Sd22 Firmware
🔐NVD Verified DataVERIFIED
CVE-2021-33044 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-287
Affected Products (CPE)
Dahuasecurity Ipc-Hum7XxxDahuasecurity Ipc-Hum7Xxx FirmwareDahuasecurity Ipc-Hx3XxxDahuasecurity Ipc-Hx3Xxx FirmwareDahuasecurity Ipc-Hx5Xxx
CVE-2021-33045 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-287
Affected Products (CPE)
Dahuasecurity Ipc-Hum7XxxDahuasecurity Ipc-Hum7Xxx FirmwareDahuasecurity Ipc-Hx3XxxDahuasecurity Ipc-Hx3Xxx FirmwareDahuasecurity Ipc-Hx5Xxx
CVE-2024-39943 ↗CVSS 8.8 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-284CWE-78
Affected Products (CPE)
Rejetto Http File Server
CVE-2025-31702 ↗CVSS 6.8 — MEDIUM
Attack Vector
NETWORK
Complexity
HIGH
Vector String
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:NWeaknesses
CWE-732
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.