Vulnerability in Dahuasecurity Ipc-Hdbw4xxx

CVE-2017-9317

Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device.

EPSS: 0.010 (58.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

References

cybersecurity@dahuatech.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2017-9317?: CVE-2017-9317 is a high-severity vulnerability in Dahuasecurity Ipc-Hdbw4xxx. CVSS score: 8.8/10. Published 2018-05-23.
How severe is CVE-2017-9317?: High severity. CVSS v3 base score is 8.8 out of 10.