CVE-2017-9316 in IPC-HDW4300S
Zusammenfassung (Englisch)
Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device to receive only specific data (one direction, no transmit) and therefore it was not involved in any instance of collecting user privacy data or allowing remote code execution.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservieren
30.05.2017
Veröffentlichung
27.11.2017
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 110024 | Dahua IPC-HDW4300S Firmware Upgrade schwache Authentisierung | 287 | Nicht definiert | Nicht definiert | CVE-2017-9316 |