CVE-2017-9317
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD
Description
Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device.
Affected (8)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.218.0000002.1.r.171229 |
| Running on/with | Platform Versions |
|---|---|
Dahuasecurity Xvr5x16 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.218.0000002.1.r.171229 |
| Running on/with | Platform Versions |
|---|---|
Dahuasecurity Xvr5x08 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.218.0000002.1.r.171229 |
| Running on/with | Platform Versions |
|---|---|
Dahuasecurity Xvr5x04 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.218.0000002.1.r.171229 |
| Running on/with | Platform Versions |
|---|---|
Dahuasecurity Xvr7x16 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.622.0000000.18.r.20171110 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.621.0000.28.r.20170912 |
| Running on/with | Platform Versions |
|---|---|
Dahuasecurity Ipc Hdbw4xxx | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.622.0000000.18.r.20171110 |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.621.0000.28.r.20170912 |
| Running on/with | Platform Versions |
|---|---|
Dahuasecurity Ipc Hdbw5xxx | All versions |
References (2)
Source: cybersecurity@dahuatech.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Timeline
No history available yet.