CVE-2017-9317
Severity Score
8.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device.
Se ha encontrado una vulnerabilidad de escalado de privilegios en algunos dispositivos Dahua IP. Un atacante en posesión de una cuenta con bajos privilegios puede obtener acceso a información de credenciales de una cuenta con altos privilegios y obtener información sobre el dispositivo o atacarlo.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-05-30 CVE Reserved
- 2018-05-23 CVE Published
- 2023-03-07 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.dahuasecurity.com/support/cybersecurity/annoucementNotice/337 | 2019-10-03 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Dahuasecurity Search vendor "Dahuasecurity" | Xvr5x16 Firmware Search vendor "Dahuasecurity" for product "Xvr5x16 Firmware" | < 3.218.0000002.1.r.171229 Search vendor "Dahuasecurity" for product "Xvr5x16 Firmware" and version " < 3.218.0000002.1.r.171229" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Xvr5x16 Search vendor "Dahuasecurity" for product "Xvr5x16" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Xvr5x08 Firmware Search vendor "Dahuasecurity" for product "Xvr5x08 Firmware" | < 3.218.0000002.1.r.171229 Search vendor "Dahuasecurity" for product "Xvr5x08 Firmware" and version " < 3.218.0000002.1.r.171229" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Xvr5x08 Search vendor "Dahuasecurity" for product "Xvr5x08" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Xvr5x04 Firmware Search vendor "Dahuasecurity" for product "Xvr5x04 Firmware" | < 3.218.0000002.1.r.171229 Search vendor "Dahuasecurity" for product "Xvr5x04 Firmware" and version " < 3.218.0000002.1.r.171229" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Xvr5x04 Search vendor "Dahuasecurity" for product "Xvr5x04" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Xvr7x16 Firmware Search vendor "Dahuasecurity" for product "Xvr7x16 Firmware" | < 3.218.0000002.1.r.171229 Search vendor "Dahuasecurity" for product "Xvr7x16 Firmware" and version " < 3.218.0000002.1.r.171229" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Xvr7x16 Search vendor "Dahuasecurity" for product "Xvr7x16" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdbw4xxx Firmware Search vendor "Dahuasecurity" for product "Ipc-hdbw4xxx Firmware" | < 2.622.0000000.18.r.20171110 Search vendor "Dahuasecurity" for product "Ipc-hdbw4xxx Firmware" and version " < 2.622.0000000.18.r.20171110" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdbw4xxx Search vendor "Dahuasecurity" for product "Ipc-hdbw4xxx" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdbw4xxx Firmware Search vendor "Dahuasecurity" for product "Ipc-hdbw4xxx Firmware" | < 2.621.0000.28.r.20170912 Search vendor "Dahuasecurity" for product "Ipc-hdbw4xxx Firmware" and version " < 2.621.0000.28.r.20170912" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdbw4xxx Search vendor "Dahuasecurity" for product "Ipc-hdbw4xxx" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdbw5xxx Firmware Search vendor "Dahuasecurity" for product "Ipc-hdbw5xxx Firmware" | < 2.622.0000000.18.r.20171110 Search vendor "Dahuasecurity" for product "Ipc-hdbw5xxx Firmware" and version " < 2.622.0000000.18.r.20171110" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdbw5xxx Search vendor "Dahuasecurity" for product "Ipc-hdbw5xxx" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdbw5xxx Firmware Search vendor "Dahuasecurity" for product "Ipc-hdbw5xxx Firmware" | < 2.621.0000.28.r.20170912 Search vendor "Dahuasecurity" for product "Ipc-hdbw5xxx Firmware" and version " < 2.621.0000.28.r.20170912" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdbw5xxx Search vendor "Dahuasecurity" for product "Ipc-hdbw5xxx" | - | - |
Safe
|