Dahua CVE-2021-33045 Loopback JSON-RPC Auth Bypass

Ibrahim Saud@tektrix

•updated Sep 20, 2026•0•0•5

This rule detects attempts to exploit the authentication bypass vulnerability in Dahua firmware (CVE-2021-33045) via the JSON-RPC interface. The attacker attempts to manipulate the 'loginType' and 'ipAddr' fields, specifically using 'Loopback' as the login type and '127.0.0.1' as the IP address to bypass security controls.