Skip to content
OpenAdvisories
Unscored CVE-2017-9315 EUVD-2017-18250GHSA-hcw2-qh59-gg8h

Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua auth…

Published Nov 28, 2017 · Updated Sep 17, 2024 · Assigned by dahua

Vendor: Dahua Product: Dahua IP Camera and IP PTZ IPC-HFW1XXX, IPC-HDW1XXX, IPC-HDBW1XXX, IPC-HFW2XXX, IPC-HDW2XXX, IPC-HDBW2XXX, IPC-HFW4XXX, IPC-HDW4XXX, IPC-HDBW4XXX, IPC-HF5XXX, IPC-HFW5XXX, IPC-HDW5XXX, IPC-H

Description

Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.

Affected products

VendorProductAffectedFixed
Dahua Technologies Dahua IP Camera and IP PTZ IPC-HFW1XXX, IPC-HDW1XXX, IPC-HDBW1XXX, IPC-HFW2XXX, IPC-HDW2XXX, IPC-HDBW2XXX, IPC-HFW4XXX, IPC-HDW4XXX, IPC-HDBW4XXX, IPC-HF5XXX, IPC-HFW5XXX, IPC-HDW5XXX, IPC-H Versions Build between 2015/07 and 2017/03 —

References