HIGH🇵🇱 Wersja polska

CVE-2017-7253

CVSS 8.8v3.0pub. 2017-03-30upd. 2026-05-13

Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the first JSON object encountered has a "Component error: login challenge!" message. The second JSON object encountered has a result indicating a successful admin login.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Dahuasecurity Ip Camera

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ip Camera Firmware

    OS
    Dahuasecurity
    3.200.0001.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2017-3223CRITICAL9.8ten sam produkt

Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the S...

CVE-2021-33045CRITICAL9.8⚠ KEVten sam vendor

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attack...

CVE-2021-33044CRITICAL9.8⚠ KEVten sam vendor

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attack...

CVE-2021-33046CRITICAL9.8ten sam vendor

Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit thi...

CVE-2020-9502CRITICAL9.8ten sam vendor

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During n...