CVE-2021-33045 Dahua JSON-RPC global.login Loopback localhost trust bypass

Arnold Chan@slaz

•updated Sep 19, 2026•0•0•0

Detects an attempt to exploit CVE-2021-33045 in Dahua devices, where an attacker sends a malicious JSON-RPC request to bypass authentication by leveraging the 'Loopback' login type and targeting the '127.0.0.1' address in the 'ipAddr' parameter.