Lucene search

[email protected]NVD:CVE-2017-7927

HistoryMay 06, 2017 - 12:29 a.m.

CVE-2017-7927

2017-05-0600:29:00

CWE-798

CWE-836

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

Confidence

High

EPSS

0.031

Percentile

91.2%

JSON

A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The use of password hash instead of password for authentication vulnerability was identified, which could allow a malicious user to bypass authentication without obtaining the actual password.

Affected configurations

Nvd

Node

dahuasecuritydh-ipc-hdbw23a0rn-zs_firmwareMatch-

AND

dahuasecuritydh-ipc-hdbw23a0rn-zsMatch-

Node

dahuasecuritydh-ipc-hdbw13a0sn_firmwareMatch-

AND

dahuasecuritydh-ipc-hdbw13a0snMatch-

Node

dahuasecuritydh-ipc-hdw1xxx_firmwareMatch-

AND

dahuasecuritydh-ipc-hdw1xxxMatch-

Node

dahuasecuritydh-ipc-hdw2xxx_firmwareMatch-

AND

dahuasecuritydh-ipc-hdw2xxxMatch-

Node

dahuasecuritydh-ipc-hdw4xxx_firmwareMatch-

AND

dahuasecuritydh-ipc-hdw4xxxMatch-

Node

dahuasecuritydh-ipc-hfw1xxx_firmwareMatch-

AND

dahuasecuritydh-ipc-hfw1xxxMatch-

Node

dahuasecuritydh-ipc-hfw2xxx_firmwareMatch-

AND

dahuasecuritydh-ipc-hfw2xxxMatch-

Node

dahuasecuritydh-ipc-hfw4xxx_firmwareMatch-

AND

dahuasecuritydh-ipc-hfw4xxxMatch-

Node

dahuasecuritydh-sd6cxx_firmwareMatch-

AND

dahuasecuritydh-sd6cxxMatch-

Node

dahuasecuritydh-nvr1xxx_firmwareMatch-

AND

dahuasecuritydh-nvr1xxxMatch-

Node

dahuasecuritydh-hcvr4xxx_firmwareMatch-

AND

dahuasecurityddh-hcvr4xxxMatch-

Node

dahuasecuritydh-hcvr5xxx_firmwareMatch-

AND

dahuasecuritydh-hcvr5xxxMatch-

Node

dahuasecuritydhi-hcvr51a04he-s3_firmwareMatch-

AND

dahuasecuritydhi-hcvr51a04he-s3Match-

Node

dahuasecuritydhi-hcvr51a08he-s3_firmwareMatch-

AND

dahuasecuritydhi-hcvr51a08he-s3Match-

Node

dahuasecuritydhi-hcvr58a32s-s2_firmwareMatch-

AND

dahuasecuritydhi-hcvr58a32s-s2Match-

VendorProductVersionCPE
dahuasecuritydh-ipc-hdbw23a0rn-zs_firmware-cpe:2.3:o:dahuasecurity:dh-ipc-hdbw23a0rn-zs_firmware:-:*:*:*:*:*:*:*
dahuasecuritydh-ipc-hdbw23a0rn-zs-cpe:2.3:h:dahuasecurity:dh-ipc-hdbw23a0rn-zs:-:*:*:*:*:*:*:*
dahuasecuritydh-ipc-hdbw13a0sn_firmware-cpe:2.3:o:dahuasecurity:dh-ipc-hdbw13a0sn_firmware:-:*:*:*:*:*:*:*
dahuasecuritydh-ipc-hdbw13a0sn-cpe:2.3:h:dahuasecurity:dh-ipc-hdbw13a0sn:-:*:*:*:*:*:*:*
dahuasecuritydh-ipc-hdw1xxx_firmware-cpe:2.3:o:dahuasecurity:dh-ipc-hdw1xxx_firmware:-:*:*:*:*:*:*:*
dahuasecuritydh-ipc-hdw1xxx-cpe:2.3:h:dahuasecurity:dh-ipc-hdw1xxx:-:*:*:*:*:*:*:*
dahuasecuritydh-ipc-hdw2xxx_firmware-cpe:2.3:o:dahuasecurity:dh-ipc-hdw2xxx_firmware:-:*:*:*:*:*:*:*
dahuasecuritydh-ipc-hdw2xxx-cpe:2.3:h:dahuasecurity:dh-ipc-hdw2xxx:-:*:*:*:*:*:*:*
dahuasecuritydh-ipc-hdw4xxx_firmware-cpe:2.3:o:dahuasecurity:dh-ipc-hdw4xxx_firmware:-:*:*:*:*:*:*:*
dahuasecuritydh-ipc-hdw4xxx-cpe:2.3:h:dahuasecurity:dh-ipc-hdw4xxx:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dahuasecurity	dh-ipc-hdbw23a0rn-zs_firmware	-	cpe:2.3:o:dahuasecurity:dh-ipc-hdbw23a0rn-zs_firmware:-:::::::*
dahuasecurity	dh-ipc-hdbw23a0rn-zs	-	cpe:2.3:h:dahuasecurity:dh-ipc-hdbw23a0rn-zs:-:::::::*
dahuasecurity	dh-ipc-hdbw13a0sn_firmware	-	cpe:2.3:o:dahuasecurity:dh-ipc-hdbw13a0sn_firmware:-:::::::*
dahuasecurity	dh-ipc-hdbw13a0sn	-	cpe:2.3:h:dahuasecurity:dh-ipc-hdbw13a0sn:-:::::::*
dahuasecurity	dh-ipc-hdw1xxx_firmware	-	cpe:2.3:o:dahuasecurity:dh-ipc-hdw1xxx_firmware:-:::::::*
dahuasecurity	dh-ipc-hdw1xxx	-	cpe:2.3:h:dahuasecurity:dh-ipc-hdw1xxx:-:::::::*
dahuasecurity	dh-ipc-hdw2xxx_firmware	-	cpe:2.3:o:dahuasecurity:dh-ipc-hdw2xxx_firmware:-:::::::*
dahuasecurity	dh-ipc-hdw2xxx	-	cpe:2.3:h:dahuasecurity:dh-ipc-hdw2xxx:-:::::::*
dahuasecurity	dh-ipc-hdw4xxx_firmware	-	cpe:2.3:o:dahuasecurity:dh-ipc-hdw4xxx_firmware:-:::::::*
dahuasecurity	dh-ipc-hdw4xxx	-	cpe:2.3:h:dahuasecurity:dh-ipc-hdw4xxx:-:::::::*

Rows per page:

1-10 of 301

References

us.dahuasecurity.com/en/us/Security-Bulletin_030617.php

www.securityfocus.com/bid/98312

ics-cert.us-cert.gov/advisories/ICSA-17-124-02

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

Confidence

High

EPSS

0.031

Percentile

91.2%

JSON

Related for NVD:CVE-2017-7927

cve1 cvelist1 prion1 threatpost1 ics1 openvas1