PT-2017-17061 · Dahua · Dahua Dhi-Hcvr7216A-S3

Publicado 2017-03-09 · Atualizado 2019-10-03 · CVE-2017-6432

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dahua DHI-HCVR7216A-S3 version 3.210.0001.10

Description An issue was discovered in the Dahua DVR Protocol, which operates on TCP Port 37777. This protocol is unencrypted and binary, allowing for a Man-in-the-Middle attack. Such an attack enables both sniffing and injections of packets, which can be used to create fully privileged new users and capture sensitive information.

Recommendations For Dahua DHI-HCVR7216A-S3 version 3.210.0001.10, consider restricting access to TCP Port 37777 to minimize the risk of exploitation. As a temporary workaround, limit the creation of new users and restrict access to sensitive information until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2017-6432

Produtos afetados

Dahua Dhi-Hcvr7216A-S3

Referências · 4

• https://twitter.com/null_ku7/status/839814344351240193 · Nota
• https://nullku7.github.io/stuff/exploit/dahua/2017/03/09/dahua-nvr-authbypass.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-6432 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-6432 · Aviso do Fabricante