Dahua OEM Directory

Published May 03, 2024 13:23 PM
PUBLIC - This article does not require an IPVM subscription. Feel free to share.

Updated for 2024, this directory includes US NDAA-banned and FCC-banned Dahua OEMs for 30+ companies with a graphic and links to company websites below, and 40+ that have dropped Dahua in the past few years.

IPVM Image

This list inside (with links and commentary) does not cover all Dahua OEMs, since most conceal any association with Dahua. We have only listed OEMs we have verified by examining shipping records, product documentation, and/or testing products.

See companion directories for Hikvision OEMs and Uniview OEMs.

If you have feedback on this list or others to investigate, email us at info@ipvm.com or leave a comment below.

This graphic shows the 40+ OEMs we confirmed:

IPVM Image

Links to each OEM company site:

Typically, these partners take Dahua products and substitute their branding alongside their own internally developed product or, in some cases, other OEMs, making it sometimes difficult to determine what is and is not OEMed. More confusing, many companies change OEMs from time to time.

Note: There are far more Dahua OEMs than those listed here, particularly abroad, as our sources are primarily North America-based and, even within North America, several others will not yet be listed. Email us at info@ipvm.com or leave a comment with more suggestions.

Removed / Former OEMs

We removed 30+ suppliers from this list as of 2021, as a number have stopped OEMing Dahua, stopped selling cameras altogether, changed OEMs, or gone out of business.

For those who have stopped OEMing Dahua, no other manufacturer stands out as the most common OEM, with various companies moving to Hikvision, Uniview, TVT, or Sunell.

ADI Stops Relabeling Dahua

In December of 2022, ADI removed their Dahua-relabeled Capture line from their product listing, with no notification or comment (see ADI Stops Relabeling Dahua). They released an NDAA-compliant Sunell relabel line, Capture Advance, earlier in 2022, which remains available (see ADI Capture Advance Camera Test).

Bosch OEM vs. Contract Manufacturing

Bosch historically had an atypical relationship with Dahua, actually developing and running their own firmware (verified in our testing) in cameras that Dahua manufactured for Bosch. However, some recorder product lines (see our Bosch DIVAR test) are more typical Dahua OEMs.

As of 2020, Bosch announced they were dropping Dahua as an OEM and contract manufacturer, discontinuing Dahua-manufactured/OEMed lines in the US, though they are still available in some other regions.

Beware Of Multiple Vulnerabilities

Dahua cameras have suffered from multiple major cybersecurity vulnerabilities in the past few years, these have been uncovered / disclosed:

  • Critical cloud vulnerability, 2020: Dahua and 22 OEMs including Panasonic and Stanley had hard-coded cloud keys / passwords which were shared and could be used to ultimately gain full access to cloud connected equipment.
  • Dahua Critical Vulnerabilities, 2020: 5 Vulnerabilities; one is 9.8 / 10 CVSS score and the others are 7.0 - 9.0. The most severe allows an attacker to execute malicious code on the camera.
  • Wiretapping vulnerability, 2019: In August 2019, a security researcher discovered audio streams could be accessed without authentication in Dahua and OEM models. This vulnerability allows attackers to listen to camera audio even if disabled in the web interface. See our report Dahua Wiretapping Vulnerability for full details and demonstration.
  • Exposed credentials, 2017: Vulnerable Dahua cameras and DVRs/NVRs exposed a config file containing username/password info to unauthenticated HTTP requests.
  • Hardcoded backdoor, 2017: A major vulnerability was found in Dahua cameras in 2017, allowing unauthorized admin access, very likely impacting most/all OEMs who may or may not have released updated firmware and notified customers.

Those using cameras from this OEM list should be sure to check for these vulnerabilities and seek new firmware from their OEM immediately.

In multiple instances, Dahua did not disclose these vulnerabilities. In the case of the wiretapping vulnerability, Dahua did not disclose until after IPVM notified Dahua we were publishing on it, even though a security researcher notified Dahua months earlier.

How To Tell

There are a few techniques to help verify whether a provider is a Dahua OEM, including:

  • Configuration Utilities
  • VMS Autodiscovery
  • Web Interface Similarities
  • Shipping Records

See also our full guide: Detecting Dahua and Hikvision OEMs Guide 2024

Configuration Utilities

Most Dahua OEM models will be discovered by Dahua's configuration utilities, such as this Amcrest model, IP5M-T1179E:

IPVM Image

VMS Autodiscovery

Additionally, VMSes may discover and connect to the camera as Dahua, as well, such as the Speco model shown here connected to Exacq via the Dahua driver.

IPVM Image

Web Interface Similarities

OEMs typically make only limited changes to the Dahua web interface, such as a logo or color scheme. For example, the image below shows an Amcrest camera web interface (a Dahua OEM unit) with a Dahua-branded model, nearly identical aside from the color scheme.

IPVM Image

Shipping Records

Shipping records often show that a company OEMs from Dahua. For example, the image below shows some of the shipments from Dahua to Montavue from March 2024.

IPVM Image

However, not all records are as easy to find. Many companies may hide their shipments or use different shipper/receiver names.

Other Directories

See also Hikvision OEM Directory and Uniview OEM Directory.

Feedback / More Submissions

If you have feedback on this list or others to add, email us at info@ipvm.com or leave a comment below.

[Note: This report was originally published in 2017, periodically updated since, and fully reviewed in 2024.]

Comments