CVE-2017-9317

🗓️ 23 May 2018 15:00:00Reported by dahuaType

Privilege escalation vulnerability in Dahua IP devices, allowing low privilege accounts to access high privilege credentials

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2017-9317	23 May 201815:00	–	cvelist
EUVD	EUVD-2017-18252	7 Oct 202500:30	–	euvd
NVD	CVE-2017-9317	23 May 201815:29	–	nvd
Prion	Privilege escalation	23 May 201815:29	–	prion
Tenable Nessus	Dahua Security Cameras Improper Access Control (CVE-2017-9317)	29 Jul 202400:00	–	nessus

NVD

Node

dahuasecurity xvr5x16_firmwareRange<3.218.0000002.1.r.171229

AND

dahuasecurity xvr5x16Match-

Node

dahuasecurity xvr5x08_firmwareRange<3.218.0000002.1.r.171229

AND

dahuasecurity xvr5x08Match-

Node

dahuasecurity xvr5x04_firmwareRange<3.218.0000002.1.r.171229

AND

dahuasecurity xvr5x04Match-

Node

dahuasecurity xvr7x16_firmwareRange<3.218.0000002.1.r.171229

AND

dahuasecurity xvr7x16Match-

Node

dahuasecurity ipc-hdbw4xxx_firmwareRange<2.622.0000000.18.r.20171110

AND

dahuasecurity ipc-hdbw4xxxMatch-

Node

dahuasecurity ipc-hdbw4xxx_firmwareRange<2.621.0000.28.r.20170912

AND

dahuasecurity ipc-hdbw4xxxMatch-

Node

dahuasecurity ipc-hdbw5xxx_firmwareRange<2.622.0000000.18.r.20171110

AND

dahuasecurity ipc-hdbw5xxxMatch-

Node

dahuasecurity ipc-hdbw5xxx_firmwareRange<2.621.0000.28.r.20170912

AND

dahuasecurity ipc-hdbw5xxxMatch-

[
  {
    "product": "XVR 5x04, XVR 5x08, XVR 5x16, XVR 7x16, IPC-HDBW4XXX, IPC-HDBW5XXX",
    "vendor": "Dahua Technologies",
    "versions": [
      {
        "status": "affected",
        "version": "Build before 2017/09"
      }
    ]
  }
]

Source	Link
dahuasecurity	www.dahuasecurity.com/support/cybersecurity/annoucementNotice/337

21 Nov 2024 03:35Current

8.7High risk

Vulners AI Score8.7

CVSS 24

CVSS 38.8

EPSS0.00374