Dahua p2pwn Backdoor Account Creation via CVE-2024-39943

Ibrahim Saud@tektrix

•updated Sep 20, 2026•0•0•3

Detects the creation or unauthorized usage of the 'p2pwn' backdoor account and associated 'p2password' credentials on Dahua devices. This indicator is linked to exploitation of CVE-2024-39943, which allows for persistent unauthorized access that survives device factory resets.