CVE-2017-9316

🗓️ 27 Nov 2017 17:00:00Reported by dahuaType

Firmware upgrade authentication bypass vulnerability in Dahua IPC-HDW4300S & some IP products due to internal Debug function

Reporter	Title	Published	Views	Family All 7
CNVD	Authentication Bypass Vulnerability in Multiple Dahua Products	30 Nov 201700:00	–	cnvd
Cvelist	CVE-2017-9316	27 Nov 201717:00	–	cvelist
EUVD	EUVD-2017-18251	7 Oct 202500:30	–	euvd
NVD	CVE-2017-9316	27 Nov 201717:29	–	nvd
OSV	CVE-2017-9316	27 Nov 201717:29	–	osv
Prion	Authentication flaw	27 Nov 201717:29	–	prion
Tenable Nessus	Dahua Security Cameras Improper Authentication (CVE-2017-9316)	29 Jul 202400:00	–	nessus

NVD

Node

dahuasecurity nvr11hs_firmwareMatch3.210.0000.0.r.20150206

dahuasecurity nvr11hs_firmwareMatch3.210.0000.1.r.20150420

dahuasecurity nvr11hs_firmwareMatch3.210.0000.2.r.20150715

dahuasecurity nvr11hs_firmwareMatch3.210.0000.3.r.20150921

dahuasecurity nvr11hs_firmwareMatch3.210.0000.5.r.20160409

dahuasecurity nvr11hs_firmwareMatch3.210.0000.5.r.20160603

dahuasecurity nvr11hs_firmwareMatch3.210.0000.5.r.20160803

dahuasecurity nvr11hs_firmwareMatch3.210.0000.5.r.20161226

dahuasecurity nvr11hs_firmwareMatch3.210.0000.5.r.20170305

dahuasecurity nvr11hs_firmwareMatch3.210.0000.5.r.20170321

AND

dahuasecurity nvr11hsMatch-

Node

dahuasecurity ipc-hdw4300s_firmwareMatch2.240.0009.0.r.20131015

dahuasecurity ipc-hdw4300s_firmwareMatch2.400.0000.0.r.20131231

dahuasecurity ipc-hdw4300s_firmwareMatch2.420.0000.0.r.20140419

dahuasecurity ipc-hdw4300s_firmwareMatch2.420.0002.0.r.20140621

dahuasecurity ipc-hdw4300s_firmwareMatch2.420.0002.0.r.20140724

dahuasecurity ipc-hdw4300s_firmwareMatch2.420.0005.0.r.20141205

dahuasecurity ipc-hdw4300s_firmwareMatch2.420.0006.0.r.20150311

dahuasecurity ipc-hdw4300s_firmwareMatch2.420.0007.0.r.20150409

dahuasecurity ipc-hdw4300s_firmwareMatch2.420.0008.0.r.20150710

AND

dahuasecurity ipc-hdw4300sMatch-

Node

dahuasecurity ipc-hfw4x00_firmwareMatch2.400.0000.3.r.20150312

dahuasecurity ipc-hfw4x00_firmwareMatch2.420.0006.0.r.20150311

AND

dahuasecurity ipc-hfw4x00Match-

Node

dahuasecurity ipc-hdw4x00_firmwareMatch2.400.0000.3.r.20150312

dahuasecurity ipc-hdw4x00_firmwareMatch2.420.0006.0.r.20150311

AND

dahuasecurity ipc-hdw4x00Match-

Node

dahuasecurity ipc-hdbw4x00_firmwareMatch2.400.0000.3.r.20150312

dahuasecurity ipc-hdbw4x00_firmwareMatch2.420.0006.0.r.20150311

AND

dahuasecurity ipc-hdbw4x00Match-

Node

dahuasecurity ipc-hf5x00_firmwareMatch2.400.0000.3.r.20150312

dahuasecurity ipc-hf5x00_firmwareMatch2.420.0006.0.r.20150311

AND

dahuasecurity ipc-hf5x00Match-

Node

dahuasecurity ipc-hfw5x00_firmwareMatch2.400.0000.3.r.20150312

dahuasecurity ipc-hfw5x00_firmwareMatch2.420.0006.0.r.20150311

AND

dahuasecurity ipc-hfw5x00Match-

Node

dahuasecurity ipc-hdw5x00_firmwareMatch2.400.0000.3.r.20150312

dahuasecurity ipc-hdw5x00_firmwareMatch2.420.0006.0.r.20150311

AND

dahuasecurity ipc-hdw5x00Match-

Node

dahuasecurity ipc-hdbw5x00_firmwareMatch2.400.0000.3.r.20150312

dahuasecurity ipc-hdbw5x00_firmwareMatch2.420.0006.0.r.20150311

AND

dahuasecurity ipc-hdbw5x00Match-

[
  {
    "product": "IPC-HDW4300S\\NVR11HS\\IPC-HFW4X00\\IPC-HDW4X00\\IPC-HDBW4X00\\IPC-HF5X00\\IPC-HFW5X00\\IPC-HDW5X00\\IPC-HDBW5X00\\NVR11HS",
    "vendor": "Dahua Technologies",
    "versions": [
      {
        "status": "affected",
        "version": "References are as :http://www.dahuasecurity.com/annoucementsingle/security-advisory--high-risk-vulnerability-found-in-dahua-ipc-hdw4300s-and-some-ip-products_14731_231.html"
      }
    ]
  }
]

Source	Link
dahuasecurity	www.dahuasecurity.com/annoucementsingle/security-advisory--high-risk-vulnerability-found-in-dahua-ipc-hdw4300s-and-some-ip-products_14731_231.html

13 May 2026 00:24Current

7.1High risk

Vulners AI Score7.1

CVSS 25.8

CVSS 36.5

EPSS0.01736

CWE-287