PT-2017-17061 · Dahua · Dahua Dhi-Hcvr7216A-S3

Published 2017-03-09 · Updated 2019-10-03 · CVE-2017-6432

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dahua DHI-HCVR7216A-S3 version 3.210.0001.10

Description An issue was discovered in the Dahua DVR Protocol, which operates on TCP Port 37777. This protocol is unencrypted and binary, allowing for a Man-in-the-Middle attack. Such an attack enables both sniffing and injections of packets, which can be used to create fully privileged new users and capture sensitive information.

Recommendations For Dahua DHI-HCVR7216A-S3 version 3.210.0001.10, consider restricting access to TCP Port 37777 to minimize the risk of exploitation. As a temporary workaround, limit the creation of new users and restrict access to sensitive information until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2017-6432

Affected Products

Dahua Dhi-Hcvr7216A-S3

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-6432 · Security Note
• https://osv.dev/vulnerability/CVE-2017-6432 · Vendor Advisory
• https://twitter.com/null_ku7/status/839814344351240193 · Note
• https://nullku7.github.io/stuff/exploit/dahua/2017/03/09/dahua-nvr-authbypass.html · Note