CRITICAL🇵🇱 Wersja polska

CVE-2017-7925

CVSS 9.8v3.0pub. 2017-05-06upd. 2026-05-13

A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The password in configuration file vulnerability was identified, which could lead to a malicious user assuming the identity of a privileged user and gaining access to sensitive information.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Dahuasecurity Ddh Hcvr4xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Hcvr4xxx Firmware

    OS
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Hcvr5xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Hcvr5xxx Firmware

    OS
    Dahuasecurity
    all versions

  • Dahuasecurity Dhi Hcvr51a04he S3

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dhi Hcvr51a04he S3 Firmware

    OS
    Dahuasecurity
    all versions

  • Dahuasecurity Dhi Hcvr51a08he S3

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dhi Hcvr51a08he S3 Firmware

    OS
    Dahuasecurity
    all versions

  • Dahuasecurity Dhi Hcvr58a32s S2

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dhi Hcvr58a32s S2 Firmware

    OS
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hdbw13a0sn

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hdbw13a0sn Firmware

    OS
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hdbw23a0rn Zs

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hdbw23a0rn Zs Firmware

    OS
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hdw1xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hdw1xxx Firmware

    OS
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hdw2xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hdw2xxx Firmware

    OS
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hdw4xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hdw4xxx Firmware

    OS
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hfw1xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hfw1xxx Firmware

    OS
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hfw2xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hfw2xxx Firmware

    OS
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hfw4xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Ipc Hfw4xxx Firmware

    OS
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Nvr1xxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Nvr1xxx Firmware

    OS
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Sd6cxx

    HW
    Dahuasecurity
    all versions

  • Dahuasecurity Dh Sd6cxx Firmware

    OS
    Dahuasecurity
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2017-7927HIGH7.3same product

A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-...

CVE-2021-33044CRITICAL9.8⚠ KEVPL ✓same vendor

Pominięcie uwierzytelnienia w urządzeniach Dahua podczas logowania

CVE-2021-33045CRITICAL9.8⚠ KEVPL ✓same vendor

Pominięcie uwierzytelnienia w urządzeniach Dahua podczas logowania

CVE-2021-33046CRITICAL9.8PL ✓same vendor

Obejście uwierzytelniania w procesie resetowania hasła w urządzeniach Dahua

CVE-2020-9502CRITICAL9.8PL ✓same vendor

Przewidywalne Session ID w urządzeniach Dahua — podatność CRITICAL