What is CVE-2017-7925?

CVE-2017-7925 is a critical-severity vulnerability in Dahuasecurity Ddh-Hcvr4xxx, classified under CWE-260. CVSS score: 9.8/10. Published 2017-05-06.

How severe is CVE-2017-7925?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Is CVE-2017-7925 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Dahuasecurity Ddh-Hcvr4xxx

CVE-2017-7925

A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The password in configuration file vulnerability was identified, which could lead to a malicious user assuming the identity of a privileged user and gaining access to sensitive information.

Published 2017-05-06 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.514 (98.9th percentile), scored 2026-10-19.

High probability of exploitation in the next 30 days — patch promptly. 99th percentile — 98.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.514 · newest: 0.514 · change: 0.000

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

ics-cert.us-cert.gov/advisories/ICSA-17-124-02 (US Government Resource, Third Party Advisory, Mitigation)
us.dahuasecurity.com/en/us/Security-Bulletin_030617.php (Patch, Vendor Advisory)
www.securityfocus.com/bid/98312 (VDB Entry, Third Party Advisory, vdb-entry)

Frequently asked questions

What is CVE-2017-7925?: CVE-2017-7925 is a critical-severity vulnerability in Dahuasecurity Ddh-Hcvr4xxx, classified under CWE-260. CVSS score: 9.8/10. Published 2017-05-06.
How severe is CVE-2017-7925?: Critical severity. CVSS v3 base score is 9.8 out of 10.
Is CVE-2017-7925 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.