Dahua IPC/SD CVE-2026-29115

Q: What is the CVSS score of CVE-2026-29115?

CVE-2026-29115 has a CVSS 4.0 base score of 6.9 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-35989 MEDIUM

Reachable Assertion (CWE-617)

2026-06-10 dahua

GHSA-8v9p-fgh7-hrp2

Denial Of Service Dahua

6.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jun 10, 2026 - 09:20 vuln.today

CVSS changed

Jun 10, 2026 - 07:22 NVD

6.9 (MEDIUM)

CVE Published

Jun 10, 2026 - 06:08 nvd

UNKNOWN (no severity yet)

DescriptionNVD

A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpectedly, resulting in a denial of service.

AnalysisAI

Denial of service in Dahua IPC and SD (Speed Dome) camera devices allows an authenticated remote attacker to trigger an unexpected system reboot by sending a specially crafted network packet. The vulnerability is vendor-reported under advisory DHCC-SA-202606-001 and affects specific IPC and SD models with firmware built before March 26, 2026. No public exploit code has been identified at time of analysis, and the attack requires high-privilege authentication (PR:H), materially limiting the realistic attacker population.

Technical ContextAI

The root cause is CWE-617 (Reachable Assertion): a code path in the device firmware contains an assertion that can be reached and triggered by attacker-controlled input in a crafted packet. When the assertion fires, the runtime terminates the current process or the entire firmware - on embedded platforms such as IP cameras and speed dome units, this manifests as an uncontrolled system reboot rather than a graceful service restart. The CVSS 4.0 vector (AV:N/AC:L/AT:N) confirms the vulnerable code path is reachable over the network with no special attack preconditions beyond authentication. The affected CPE cpe:2.3:a:dahua:ipc/sd identifies Dahua's IPC (IP Camera) and SD (Speed Dome) product lines as the impacted software/firmware families.

RemediationAI

The primary remediation is to update affected Dahua IPC and SD devices to firmware with a build date of March 26, 2026 or later, as indicated by the vendor advisory DHCC-SA-202606-001 (https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-202606-001). An exact patched firmware version number was not specified in the available data - operators should consult Dahua's PSIRT page or their device management portal to identify the correct build for each model. As a compensating control where immediate patching is not feasible, restrict management-plane network access to trusted IP ranges or VPN-segmented networks to limit the pool of accounts that can reach the vulnerable packet handler. Additionally, audit and minimize the number of accounts with high-privilege access to reduce the viable attacker surface. Note that restricting network access may affect remote administration workflows and should be coordinated with operational teams.