Critical ICSA-17-124-02 2 CVEs

Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras

Published May 4, 2017 · Updated May 4, 2017

Vendor: Dahua Product: Digital Video Recorders and IP Cameras

Summary

ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.

Vulnerabilities 2

Unscored —

CVE-2017-7925 Scanner template EPSS 51%

A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX,…

May 6, 2017
Unscored —

CVE-2017-7927 EPSS 37%

A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IP…

May 6, 2017

Revision history

2017-05-04 #1
ICSA-17-124-02 Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras

References

ICS Advisory ICSA-17-124-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-124-02
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-124-02