critical9.8
CVE-2017-9315
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to res…
Impact
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dahuasecurity | Ipc-Hfw1xxx Firmware | All versions |
| Dahuasecurity | Ipc-Hdw1xxx Firmware | All versions |
| Dahuasecurity | Ipc-Hdbw1xxx Firmware | All versions |
| Dahuasecurity | Ipc-Hfw2xxx Firmware | All versions |
| Dahuasecurity | Ipc-Hdw2xxx Firmware | All versions |
| Dahuasecurity | Ipc-Hdbw2xxx Firmware | All versions |
| Dahuasecurity | Ipc-Hfw4xxx Firmware | All versions |
| Dahuasecurity | Ipc-Hdw4xxx Firmware | All versions |
| Dahuasecurity | Ipc-Hdbw4xxx Firmware | All versions |
| Dahuasecurity | Ipc-Hf5xxx Firmware | All versions |
| Dahuasecurity | Ipc-Hfw5xxx Firmware | All versions |
| Dahuasecurity | Ipc-Hdw5xxx Firmware | All versions |
References
- NVD record
- CVE.org record
- http://www.dahuasecurity.com/annoucementsingle/security-advisory--admin-password-recovery-mechanism-in-some-dahua-ip-camera-and-ip-ptz-could-lead-to-security-risk_14731_221.html
- http://www.dahuasecurity.com/annoucementsingle/security-advisory--admin-password-recovery-mechanism-in-some-dahua-ip-camera-and-ip-ptz-could-lead-to-security-risk_14731_221.html