CVE-2017-9314

Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DHNVR5xxxEngPV2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message...

CVE-2017-9314

CVE-2017-9314 affects Dahua NVR models NVR50XX, NVR52XX, NVR54XX, and NVR58XX with firmware prior to DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. The vulnerability is an authentication weakness where an attacker could forge JSON messages to access additional operations. The issue is documented acro...

CVE-2017-9314: Improper Authentication

Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DHNVR5xxxEngPV2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message...

PT-2017-18841

Name of the Vulnerable Software and Affected Versions Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH NVR5xxx Eng P V2.616.0000.0.R.20171102 Description An authentication issue has been discovered, allowing an attacker to exploit it and gain access to additional...

Buffer Overflow Vulnerability in Dahua Play Library SDK dhplay.dll

Dahua Playback Library SDK is a supporting product for all devices of Zhejiang Dahua Technology Co., Ltd. and supports all stream formats of the company's devices. A buffer overflow vulnerability exists in dhplay.dll of the Dahua Play Library SDK. The vulnerability is caused by a malformed file i...

Zhejiang Dahua Playback Library SDK (win32) suffers from an out-of-bounds access vulnerability

Hikvision playback library SDK programming is a Hikvision embedded network DVRs, video servers, equipment related to the playback of the supporting products of the secondary development kit. An out-of-bounds access vulnerability exists in dhplay.dll of the playback library SDK provided by Zhejian...

Dahua IoT Devices Backdoor Unauthorized Access

An Unauthorized Access Vulnerability exists in Dahua devices. Successful exploitation of this vulnerability could allow a remote attacker to gain administrator level access on the affected device...

SQL Injection and Arbitrary Traversal Download Vulnerabilities in Zhejiang Dahua Intelligent Operation and Maintenance Management System

Zhejiang Dahua Intelligent Operation and Maintenance Platform, based on the field of video surveillance in the security industry, adopts the technologies of intelligent analysis, fault detection and workflow engine, integrates the functions of video quality diagnosis, video recording checking and...

Dahua IP cameras Sonia web interface is vulnerable to stack buffer overflow

Overview Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow. Description CWE-121: Stack-based Buffer Overflow - CVE-2017-3223Dahua IP camera products include an...

Command Execution Vulnerability in Dahua DSS-Peaceful City

DSS-Safe City is a set of integrated monitoring and management platform. Dahua DSS-Peaceful City uses Apache Struts 2 as the web application framework. Due to a remote command execution vulnerability in the software, an attacker can trigger the vulnerability by modifying the Content-Type value in...

Dahua Digital Video Recorder and IP Camera Configuration File Password Vulnerability

Dahua DH-IPC-HDBW23A0RN-ZS and others are camera products from DaHua China. A profile password vulnerability exists in a variety of DaHua digital video recorders and IP cameras, which can be exploited by an attacker to impersonate a privileged user and gain access to sensitive information...

Zhejiang Dahua DSS 3.0 Security New Platform Exists struts2-045 Remote Code Execution Vulnerability

DSS Digital Surveillance System is a highly integrated and powerful digital surveillance management system developed by Zhejiang Dahua Technology Co. Zhejiang Dahua DSS 3.0 security new platform uses Apache Struts 2 as the web application framework, because the software has a remote code executio...

Design/Logic Flaw

A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and...

CVE-2017-7925

A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and...

CVE-2017-7927

A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3,...

CVE-2017-7925

A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and...

Dahua Technology Authentication Authentication Vulnerability

Dahua Technology Authentication is an access control reader produced by Dahua Technology Attack. An authentication vulnerability exists in Dahua Technology Authentication. An attacker could exploit this vulnerability to gain unauthorized access to restricted content by bypassing intended security...

CVE-2017-7925: Password in Configuration File

A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and...

PT-2017-18000

Name of the Vulnerable Software and Affected Versions Dahua DH-IPC-HDBW23A0RN-ZS Dahua DH-IPC-HDBW13A0SN Dahua DH-IPC-HDW1XXX Dahua DH-IPC-HDW2XXX Dahua DH-IPC-HDW4XXX Dahua DH-IPC-HFW1XXX Dahua DH-IPC-HFW2XXX Dahua DH-IPC-HFW4XXX Dahua DH-SD6CXX Dahua DH-NVR1XXX Dahua DH-HCVR4XXX Dahua DH-HCVR5X...

CVE-2017-7925

The CVE-2017-7925 issue affects Dahua Digital Video Recorders and IP Cameras (e.g., DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCV...