CVEvulnerability

CVE-2017-9317

8.8 HIGH Published 2018-05-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-05-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N

Description

Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device.

Affected configurations

• dahuasecurity xvr5x16 firmware (< 3.218.0000002.1.r.171229) • dahuasecurity xvr5x08 firmware (< 3.218.0000002.1.r.171229) • dahuasecurity xvr5x04 firmware (< 3.218.0000002.1.r.171229) • dahuasecurity xvr7x16 firmware (< 3.218.0000002.1.r.171229) • dahuasecurity ipc-hdbw4xxx firmware (< 2.622.0000000.18.r.20171110) • dahuasecurity ipc-hdbw4xxx firmware (< 2.621.0000.28.r.20170912) • dahuasecurity ipc-hdbw5xxx firmware (< 2.622.0000000.18.r.20171110) • dahuasecurity ipc-hdbw5xxx firmware (< 2.621.0000.28.r.20170912)

References