Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras
view advisory published 2017-05-04
ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-7927US | high7.3OT elevated | — | ||
A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX,… | ||||
| CVE-2017-7925US | critical9.8 | — | ||
A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2X… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationDigital Video Recorders and IP Cameras
Dahua has released updated firmware to mitigate these vulnerabilities.
- MitigationDigital Video Recorders and IP Cameras
Dahua has released updated firmware to mitigate these vulnerabilities.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan