CVE-2021-33044 Dahua NetKeyboard Auth Bypass via global.login RPC

Arnold Chan@slaz

•updated Sep 6, 2026•0•0•3

Detects network requests targeting Dahua devices that attempt to exploit CVE-2021-33044. The exploitation involves sending a crafted 'global.login' RPC call with specific parameters (clientType 'NetKeyboard', loginType 'Direct', authorityType 'Default') to bypass authentication and retrieve administrative session tokens.