high8.8
CVE-2017-9317
Privilege escalation vulnerability found in some Dahua IP devices.
Impact
Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dahuasecurity | Xvr5x16 Firmware | before 3.218.0000002.1.r.171229 |
| Dahuasecurity | Xvr5x08 Firmware | before 3.218.0000002.1.r.171229 |
| Dahuasecurity | Xvr5x04 Firmware | before 3.218.0000002.1.r.171229 |
| Dahuasecurity | Xvr7x16 Firmware | before 3.218.0000002.1.r.171229 |
| Dahuasecurity | Ipc-Hdbw4xxx Firmware | before 2.622.0000000.18.r.20171110 before 2.621.0000.28.r.20170912 |
| Dahuasecurity | Ipc-Hdbw5xxx Firmware | before 2.622.0000000.18.r.20171110 before 2.621.0000.28.r.20170912 |