Skip to content

Tools Exploits Blog

Tools Exploits Blog

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Loading CVE intelligence

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Feeds Contact Privacy© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

Back to Exploits

CVE-2021-33044

CriticalPublished

Dahua IP Camera Authentication Bypass Vulnerability

Published: Sep 15, 2021
Updated: Jan 12, 2026
Assigning CNA: dahua
Evidence observed: Aug 21, 2024

Primary CVSS

9.8/ 10Critical

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

100.0%

High · next 30 days

Percentile: 100.0%
Model date: Oct 17, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

CISA Known Exploited

This CVE appears in the CISA Known Exploited Vulnerabilities catalog.

Summary

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

Sources

Repository evidence: Files: 1 · Repositories: 1

1 Template

Dahua IPC/VTH/VTO - Authentication BypassTemplate
http/cves/2021/CVE-2021-33044.yaml
Nuclei Templates
DetectionEvidence observed: Sep 26, 2026Revision: 17f5725dc10cRelated tool
Declared conditions
- network: http($.protocol_keys)
- verification: status,word($.matchers[*].type)

CVE-2021-33044Exploit
Exploit for Dahua IPC/VTH/VTO devices that bypasses identity authentication by sending crafted malicious packets, allowing unauthorized access.
DAHUA_AUTH-BYPASS-CVE-2021-33044Exploit
PoC exploit for Dahua authentication bypass (CVE-2021-33044). Scans subnets, tests multiple CVEs, and dumps device configs via crafted cookies without valid credentials.
DahuaLoginBypassExploit
Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.
LoHongCam-CVE-2021-33044Exploit
Python exploit for Dahua device authentication bypass (CVE-2021-33044). Sends crafted malicious data packets to bypass login and gain unauthorized access to IPC/VTH/VTO devices.
Camera-Dahua-Research-l-h-ng-CVE-2021-33044Exploit
DAHUA_AUTH-BYPASS-CVE-2021-33044
DahuaConsoleExploit
Dahua Console, access internal debug console and/or other researched functions in Dahua devices. Feel free to contribute in this project.
CVE-2021-33044Exploit
Dahua IPC/VTH/VTO devices auth bypass exploit
dahua-cve-researchExploit
Dahua IP camera CVE research toolkit (CVE-2021-33044/33045, CVE-2025-31700/31701)
PoCPoC
Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.