6.5
CVE-2017-9316
- EPSS 1.89%
- Veröffentlicht 27.11.2017 17:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Erkennungen
LoginFirmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device to receive only specific data (one direction, no transmit) and therefore it was not involved in any instance of collecting user privacy data or allowing remote code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dahuasecurity ≫ Nvr11hs Firmware Version 3.210.0000.0.r.20150206
Dahuasecurity ≫ Nvr11hs Firmware Version 3.210.0000.1.r.20150420
Dahuasecurity ≫ Nvr11hs Firmware Version 3.210.0000.2.r.20150715
Dahuasecurity ≫ Nvr11hs Firmware Version 3.210.0000.3.r.20150921
Dahuasecurity ≫ Nvr11hs Firmware Version 3.210.0000.5.r.20160409
Dahuasecurity ≫ Nvr11hs Firmware Version 3.210.0000.5.r.20160603
Dahuasecurity ≫ Nvr11hs Firmware Version 3.210.0000.5.r.20160803
Dahuasecurity ≫ Nvr11hs Firmware Version 3.210.0000.5.r.20161226
Dahuasecurity ≫ Nvr11hs Firmware Version 3.210.0000.5.r.20170305
Dahuasecurity ≫ Nvr11hs Firmware Version 3.210.0000.5.r.20170321
Dahuasecurity ≫ Ipc-hdw4300s Firmware Version 2.240.0009.0.r.20131015
Dahuasecurity ≫ Ipc-hdw4300s Firmware Version 2.400.0000.0.r.20131231
Dahuasecurity ≫ Ipc-hdw4300s Firmware Version 2.420.0000.0.r.20140419
Dahuasecurity ≫ Ipc-hdw4300s Firmware Version 2.420.0002.0.r.20140621
Dahuasecurity ≫ Ipc-hdw4300s Firmware Version 2.420.0002.0.r.20140724
Dahuasecurity ≫ Ipc-hdw4300s Firmware Version 2.420.0005.0.r.20141205
Dahuasecurity ≫ Ipc-hdw4300s Firmware Version 2.420.0006.0.r.20150311
Dahuasecurity ≫ Ipc-hdw4300s Firmware Version 2.420.0007.0.r.20150409
Dahuasecurity ≫ Ipc-hdw4300s Firmware Version 2.420.0008.0.r.20150710
Dahuasecurity ≫ Ipc-hfw4x00 Firmware Version 2.400.0000.3.r.20150312
Dahuasecurity ≫ Ipc-hfw4x00 Firmware Version 2.420.0006.0.r.20150311
Dahuasecurity ≫ Ipc-hdw4x00 Firmware Version 2.400.0000.3.r.20150312
Dahuasecurity ≫ Ipc-hdw4x00 Firmware Version 2.420.0006.0.r.20150311
Dahuasecurity ≫ Ipc-hdbw4x00 Firmware Version 2.400.0000.3.r.20150312
Dahuasecurity ≫ Ipc-hdbw4x00 Firmware Version 2.420.0006.0.r.20150311
Dahuasecurity ≫ Ipc-hf5x00 Firmware Version 2.400.0000.3.r.20150312
Dahuasecurity ≫ Ipc-hf5x00 Firmware Version 2.420.0006.0.r.20150311
Dahuasecurity ≫ Ipc-hfw5x00 Firmware Version 2.400.0000.3.r.20150312
Dahuasecurity ≫ Ipc-hfw5x00 Firmware Version 2.420.0006.0.r.20150311
Dahuasecurity ≫ Ipc-hdw5x00 Firmware Version 2.400.0000.3.r.20150312
Dahuasecurity ≫ Ipc-hdw5x00 Firmware Version 2.420.0006.0.r.20150311
Dahuasecurity ≫ Ipc-hdbw5x00 Firmware Version 2.400.0000.3.r.20150312
Dahuasecurity ≫ Ipc-hdbw5x00 Firmware Version 2.420.0006.0.r.20150311
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.89% | 0.769 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.5 | 2.2 | 4.2 |
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
|
| NIST | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:P
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
http://www.dahuasecurity.com/annoucementsingle/security-advisory--high-risk-vulnerability-found-in-dahua-ipc-hdw4300s-and-some-ip-products_14731_231.html