Skip to content
OpenAdvisories
Unscored CVE-2017-9317 EUVD-2017-18252GHSA-xxmj-hwq5-5h3j

Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to crede…

Published May 23, 2018 · Updated Sep 16, 2024 · Assigned by dahua

Description

Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device.

Affected products

VendorProductAffectedFixed
Dahua Technologies XVR 5x04, XVR 5x08, XVR 5x16, XVR 7x16, IPC-HDBW4XXX, IPC-HDBW5XXX Build before 2017/09 —

References