PT-2017-18842 · Dahua · Dahua Ip Ptz+1

Publicado 2017-11-28 · Atualizado 2019-10-03 · CVE-2017-9315

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dahua IP camera (affected versions not specified) Dahua IP PTZ (affected versions not specified)

Description The issue concerns a potentially compromised algorithm used in a password reset mechanism for Dahua IP cameras and IP PTZ devices. This could allow an attacker to utilize the compromised algorithm.

Recommendations For Dahua IP camera, consider restricting access to the password reset mechanism until a secure alternative is provided. For Dahua IP PTZ, avoid using the temporary password feature from Dahua authorized dealers until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2017-9315

ZDI-18-130

Produtos afetados

Dahua Ip Ptz

Dahua Ip Camera

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-9315 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-18-130 · Nota de Segurança
• http://dahuasecurity.com/annoucementsingle/security-advisory--admin-password-recovery-mechanism-in-some-dahua-ip-camera-and-ip-ptz-could-lead-to-security-risk_14731_221.html · Aviso do Fabricante