CVE-2021-33044 Dahua NetKeyboard global.login auth bypass

Ibrahim Saud@tektrix

•updated Sep 20, 2026•0•0•7

Detects attempts to exploit CVE-2021-33044, an authentication bypass vulnerability in Dahua NetKeyboard hardware. The rule triggers when a POST request containing 'global.login', 'clientType: NetKeyboard', and 'loginType: Direct' is observed, which allows unauthorized access by manipulating authentication parameters.