PT-2018-8506 · Dahua · Dahua Ip Devices

Publicado 2018-05-23 · Atualizado 2019-10-03 · CVE-2017-9317

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dahua IP devices (affected versions not specified)

Description A privilege escalation issue has been discovered, allowing an attacker with a low-privilege account to access credential information of a high-privilege account. This can lead to the attacker obtaining device information or launching further attacks on the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2017-9317

Produtos afetados

Dahua Ip Devices

Referências · 3

• https://dahuasecurity.com/support/cybersecurity/annoucementNotice/337 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-9317 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-9317 · Nota de Segurança