PT-2018-8506 · Dahua · Dahua Ip Devices

Published 2018-05-23 · Updated 2019-10-03 · CVE-2017-9317

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dahua IP devices (affected versions not specified)

Description A privilege escalation issue has been discovered, allowing an attacker with a low-privilege account to access credential information of a high-privilege account. This can lead to the attacker obtaining device information or launching further attacks on the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2017-9317

Affected Products

Dahua Ip Devices

References · 3

• https://dahuasecurity.com/support/cybersecurity/annoucementNotice/337 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-9317 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9317 · Security Note