CVEvulnerability

CVE-2017-9314

8.8 HIGH Published 2017-11-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-11-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-287

Description

Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message.

Affected configurations

• dahuasecurity nvr5464-16p-4ks2 firmware (< dh nvr5464 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5208-8p-4ks2 firmware (< dh nvr5208 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5432-16p-4ks2 firmware (< dh nvr5432 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5416-16p-4ks2 firmware (< dh nvr5416 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5464-4ks2 firmware (< dh nvr5464 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5432-4ks2 firmware (< dh nvr5432 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5416-4ks2 firmware (< dh nvr5416 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5232-16p-4ks2 firmware (< dh nvr5232 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5216-16p-4ks2 firmware (< dh nvr5216 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5232-8p-4ks2 firmware (< dh nvr5232 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5216-8p-4ks2 firmware (< dh nvr5216 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5232-4ks2 firmware (< dh nvr5232 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5216-4ks2 firmware (< dh nvr5216 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5208-4ks2 firmware (< dh nvr5208 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5816-4ks2 firmware (< dh nvr5816 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5832-4ks2 firmware (< dh nvr5832 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5864-4ks2 firmware (< dh nvr5864 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5864-16p-4ks2 firmware (< dh nvr5864 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5832-16p-4ks2 firmware (< dh nvr5832 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5816-16p-4ks2 firmware (< dh nvr5816 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5424-24p-4ks2 firmware (< dh nvr5424 eng p v2.616.0000.0.r.20171102) • dahuasecurity nvr5224-24p-4ks2 firmware (< dh nvr5224 eng p v2.616.0000.0.r.20171102)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References