CVE-2017-9315 Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used...
CriticalCVSS 9.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dahuasecurity ipc-hfw1xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hdw1xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hdbw1xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hfw2xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hdw2xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hdbw2xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hfw4xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hdw4xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hdbw4xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hf5xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hfw5xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hdw5xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hdbw5xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hf8xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hfw8xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hdbw8xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-ebw8xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-pfw8xxx firmware | All versions | No fix listed |
| dahuasecurity dh-sd2xxxxx firmware | All versions | No fix listed |
| dahuasecurity ipc-pdbw8xxx firmware | All versions | No fix listed |
| dahuasecurity ipc-hum8xxx firmware | All versions | No fix listed |
| dahuasecurity psd8xxxx firmware | All versions | No fix listed |
| dahuasecurity dh-sd4xxxxx firmware | All versions | No fix listed |
| dahuasecurity dh-sd5xxxxx firmware | All versions | No fix listed |
| dahuasecurity dh-sd6xxxxx firmware | All versions | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Dahua Technologies Dahua IP Camera and IP PTZ IPC-HFW1XXX, IPC-HDW1XXX, IPC-HDBW1XXX, IPC-HFW2XXX, IPC-HDW2XXX, IPC-HDBW2XXX, IPC-HFW4XXX, IPC-HDW4XXX, IPC-HDBW4XXX, IPC-HF5XXX, IPC-HFW5XXX, IPC-HDW5XXX, IPC-HDBW5XXX, IPC-HF8XXX, IPC-HFW8XXX, IPC-HDBW8XXX, IPC-EBW8XXX, IPC- | = Versions Build between 2015/07 and 2017/03 | No fix listed |
References
- www.dahuasecurity.com vendor-advisory