CVE-2017-9314

Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message.

Score

CVSS 3.0 8.8 High

Status

Modified - cybersecurity@dahuatech.com

Published

2017-11-13

Last modified

2024-09-16

Weaknesses

CWE-287

Affected products

• Nvr50xx (Dahua Technologies)
• Vr52xx (Dahua Technologies)
• Vr54xx (Dahua Technologies)
• Vr58xx (Dahua Technologies)
• Nvr5208-4ks2 Firmware (Dahuasecurity)
• Nvr5208-8p-4ks2 Firmware (Dahuasecurity)
• Nvr5216-16p-4ks2 Firmware (Dahuasecurity)
• Nvr5216-4ks2 Firmware (Dahuasecurity)
• Nvr5216-8p-4ks2 Firmware (Dahuasecurity)
• Nvr5224-24p-4ks2 Firmware (Dahuasecurity)
• Nvr5232-16p-4ks2 Firmware (Dahuasecurity)
• Nvr5232-4ks2 Firmware (Dahuasecurity)
• Nvr5232-8p-4ks2 Firmware (Dahuasecurity)
• Nvr5416-16p-4ks2 Firmware (Dahuasecurity)
• Nvr5416-4ks2 Firmware (Dahuasecurity)
• Nvr5424-24p-4ks2 Firmware (Dahuasecurity)
• Nvr5432-16p-4ks2 Firmware (Dahuasecurity)
• Nvr5432-4ks2 Firmware (Dahuasecurity)
• Nvr5464-16p-4ks2 Firmware (Dahuasecurity)
• Nvr5464-4ks2 Firmware (Dahuasecurity)
• Nvr5816-16p-4ks2 Firmware (Dahuasecurity)
• Nvr5816-4ks2 Firmware (Dahuasecurity)
• Nvr5832-16p-4ks2 Firmware (Dahuasecurity)
• Nvr5832-4ks2 Firmware (Dahuasecurity)
• Nvr5864-16p-4ks2 Firmware (Dahuasecurity)
• Nvr5864-4ks2 Firmware (Dahuasecurity)

References

• http://www.dahuasecurity.com/annoucementsingle/security-advisory--authentication-vulnerability-found-in-some-dahua-nvr_…