CVE-2017-9317
Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - cybersecurity@dahuatech.com
- Published
- 2018-05-23
- Last modified
- 2024-09-16
Affected products
- Ipc-hdbw4xxx (Dahua Technologies)
- Ipc-hdbw5xxx (Dahua Technologies)
- Xvr 5x04 (Dahua Technologies)
- Xvr 5x08 (Dahua Technologies)
- Xvr 5x16 (Dahua Technologies)
- Xvr 7x16 (Dahua Technologies)
- Ipc-hdbw4xxx Firmware (Dahuasecurity)
- Ipc-hdbw5xxx Firmware (Dahuasecurity)
- Xvr5x04 Firmware (Dahuasecurity)
- Xvr5x08 Firmware (Dahuasecurity)
- Xvr5x16 Firmware (Dahuasecurity)
- Xvr7x16 Firmware (Dahuasecurity)
References
- https://www.dahuasecurity.com/support/cybersecurity/annoucementNotice/337
