HIGH🇵🇱 Wersja polska

CVE-2017-7253

CVSS 8.8v3.0pub. 2017-03-30upd. 2026-05-13

Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the first JSON object encountered has a "Component error: login challenge!" message. The second JSON object encountered has a result indicating a successful admin login.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Dahuasecurity Ip Camera

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Ip Camera Firmware

    OS
    Dahuasecurity
    3.200.0001.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2017-3223CRITICAL9.8PL ✓same product

Stack buffer overflow w Dahua IP Camera – RCE bez uwierzytelnienia

CVE-2021-33045CRITICAL9.8⚠ KEVPL ✓same vendor

Pominięcie uwierzytelnienia w urządzeniach Dahua podczas logowania

CVE-2021-33044CRITICAL9.8⚠ KEVPL ✓same vendor

Pominięcie uwierzytelnienia w urządzeniach Dahua podczas logowania

CVE-2021-33046CRITICAL9.8PL ✓same vendor

Obejście uwierzytelniania w procesie resetowania hasła w urządzeniach Dahua

CVE-2020-9502CRITICAL9.8PL ✓same vendor

Przewidywalne Session ID w urządzeniach Dahua — podatność CRITICAL