# dahua

Published articles for dahua.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses

DevFeed: [Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses](<https://devfeed.tech/articles/attackers-hijack-dahua-ip-cameras-in-ukraine-using-p2p-access-and-auth-weaknesses-101868.md>)

Original publisher: [Read original article](<https://thehackernews.com/2026/10/attackers-hijack-dahua-ip-cameras-in.html>)

Author: The Hacker News

Published: 2026-10-27T06:34:47Z

Content type: news

Language: en

Sources: [Cyber Newsroom](<https://devfeed.tech/sources/cyber-newsroom.md>)

Topics: [network security](<https://devfeed.tech/topics/network-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [known exploitable vulnerabilities](<https://devfeed.tech/topics/known-exploitable-vulnerabilities.md>), [P2P](<https://devfeed.tech/topics/p2p.md>)

Tags: [account](<https://devfeed.tech/tags/account.md>), [alert](<https://devfeed.tech/tags/alert.md>), [attack](<https://devfeed.tech/tags/attack.md>), [auth](<https://devfeed.tech/tags/auth.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [authentication-bypass](<https://devfeed.tech/tags/authentication-bypass.md>), [backdoor](<https://devfeed.tech/tags/backdoor.md>), [brute-force-attacks](<https://devfeed.tech/tags/brute-force-attacks.md>), [cameras](<https://devfeed.tech/tags/cameras.md>), [campaign](<https://devfeed.tech/tags/campaign.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cyber-attack](<https://devfeed.tech/tags/cyber-attack.md>), [cyber-espionage](<https://devfeed.tech/tags/cyber-espionage.md>), [dahua](<https://devfeed.tech/tags/dahua.md>), [hijack](<https://devfeed.tech/tags/hijack.md>), [iot-security](<https://devfeed.tech/tags/iot-security.md>), [ip](<https://devfeed.tech/tags/ip.md>), [network-security](<https://devfeed.tech/tags/network-security.md>), [p2p](<https://devfeed.tech/tags/p2p.md>), [remote](<https://devfeed.tech/tags/remote.md>), [surveillance](<https://devfeed.tech/tags/surveillance.md>), [ukraine](<https://devfeed.tech/tags/ukraine.md>), [video](<https://devfeed.tech/tags/video.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

CERT-UA reports unauthorized access to Dahua cameras and DVRs, including video viewing, configuration changes, and creation of third-party accounts. Attackers can use Dahua's Easy4IP P2P cloud relay: device serial numbers follow a predictable pattern that can be guessed at scale, exposing devices with P2P enabled even when they are not directly internet-accessible. Weak or known passwords and authentication bypass flaws in outdated firmware, including CVE-2021-33044 and CVE-2021-33045, can defeat authentication. Indicators include unfamiliar accounts, unauthorized configuration changes, and DVRIP authentication events from 127.0.0.1. CERT-UA advises disabling P2P when unnecessary, avoiding direct internet exposure, and updating software. It did not disclose the number of affected devices, timing, targets, or responsible party. The article also cites separate Hunt.io campaigns involving other camera and router vulnerabilities, including a reported large-scale Dahua campaign.

### Source excerpt

Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. "Cases of compromising IP camer ... Read more Published Date: Oct 27, 2026 (3 hours, 57 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-31702 CVE-2024-57049 CVE-2024-53375 CVE-2021-36260 CVE-2021-33045 CVE-2021-33044 CVE-2020-25169 CVE-2020-25078 CVE-2017-7921