CVE Feed

    Dashboard / CVE / CVE-2017-6432

    CVE-2017-6432

    An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which operates on TCP Port 37777, is an unencrypted, binary protocol. Performing a Man-in-the-Middle attack allows both sniffing and injections of packets, which allows creation of fully privileged new users, in addition to capture of sensitive information.

    Published:Mar 9, 2017
    Last Modified:Apr 20, 2025
    EPS:Mar 9, 2017
    EPSS Score:0.00168
    CVSS Score:8.1

    Affected Products

    Vendor
    Dahuasecurity
    Product
    Dhi-hcvr7216a-s3
    Vendor
    Dahuasecurity
    Product
    Nvr Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High