4
CVSSv2

CVE-2017-9317

Published: 23/05/2018 Updated: 03/10/2019
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device.

Vulnerable Product Search on Vulmon Subscribe to Product

dahuasecurity xvr5x16_firmware

dahuasecurity xvr5x08_firmware

dahuasecurity xvr5x04_firmware

dahuasecurity xvr7x16_firmware

dahuasecurity ipc-hdbw4xxx_firmware

dahuasecurity ipc-hdbw5xxx_firmware