Search — “CVE-2021-33044”

CERT-UA reports confirmed compromises of Dahua IP cameras and DVRs: attackers brute-force predictable serial numbers via the Easy4IP P2P cloud relay, then use weak passwords or the CVE-2021-33044/33045 authentication bypasses to view streams, change configuration and create rogue accounts. Hunt.io's related Operation CameraSwarm compromised 14,530+ cameras and planted a persistent backdoor account (p2pwn / p2password) over RPC that survives password changes and factory resets. Hunt for unknown accounts, configuration changes, and DVRIP authentication events from 127.0.0.1 in device audit logs, plus inbound scanning of TCP 37777.