CVE Feed

    Dashboard / CVE / CVE-2017-9316

    CVE-2017-9316

    Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device to receive only specific data (one direction, no transmit) and therefore it was not involved in any instance of collecting user privacy data or allowing remote code execution.

    Published:Nov 27, 2017
    Last Modified:Apr 20, 2025
    EPS:Nov 27, 2017
    EPSS Score:0.02297
    CVSS Score:6.5

    Affected Products

    Vendor
    Dahuasecurity
    Product
    Ipc-hdbw4x00
    Vendor
    Dahuasecurity
    Product
    Ipc-hdbw4x00 Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hdbw5x00
    Vendor
    Dahuasecurity
    Product
    Ipc-hdbw5x00 Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hdw4300s
    Vendor
    Dahuasecurity
    Product
    Ipc-hdw4300s Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hdw4x00
    Vendor
    Dahuasecurity
    Product
    Ipc-hdw4x00 Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hdw5x00
    Vendor
    Dahuasecurity
    Product
    Ipc-hdw5x00 Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hf5x00
    Vendor
    Dahuasecurity
    Product
    Ipc-hf5x00 Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hfw4x00
    Vendor
    Dahuasecurity
    Product
    Ipc-hfw4x00 Firmware
    Vendor
    Dahuasecurity
    Product
    Ipc-hfw5x00
    Vendor
    Dahuasecurity
    Product
    Ipc-hfw5x00 Firmware
    Vendor
    Dahuasecurity
    Product
    Nvr11hs
    Vendor
    Dahuasecurity
    Product
    Nvr11hs Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High