8.8

CVE-2017-9317

Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dahuasecurity ≫ Xvr5x16 Firmware Version < 3.218.0000002.1.r.171229
   Dahuasecurity ≫ Xvr5x16 Version -
Dahuasecurity ≫ Xvr5x08 Firmware Version < 3.218.0000002.1.r.171229
   Dahuasecurity ≫ Xvr5x08 Version -
Dahuasecurity ≫ Xvr5x04 Firmware Version < 3.218.0000002.1.r.171229
   Dahuasecurity ≫ Xvr5x04 Version -
Dahuasecurity ≫ Xvr7x16 Firmware Version < 3.218.0000002.1.r.171229
   Dahuasecurity ≫ Xvr7x16 Version -
Dahuasecurity ≫ Ipc-hdbw4xxx Firmware Version < 2.622.0000000.18.r.20171110
   Dahuasecurity ≫ Ipc-hdbw4xxx Version -
Dahuasecurity ≫ Ipc-hdbw4xxx Firmware Version < 2.621.0000.28.r.20170912
   Dahuasecurity ≫ Ipc-hdbw4xxx Version -
Dahuasecurity ≫ Ipc-hdbw5xxx Firmware Version < 2.622.0000000.18.r.20171110
   Dahuasecurity ≫ Ipc-hdbw5xxx Version -
Dahuasecurity ≫ Ipc-hdbw5xxx Firmware Version < 2.621.0000.28.r.20170912
   Dahuasecurity ≫ Ipc-hdbw5xxx Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.96% 0.57
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://www.dahuasecurity.com/support/cybersecurity/annoucementNotice/337
Patch
Vendor Advisory