Description
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.
Published: 2017-11-28
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2017-18250 Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.
History

No history.

Subscriptions

Dahuasecurity Dh-sd2xxxxx Dh-sd2xxxxx Firmware Dh-sd4xxxxx Dh-sd4xxxxx Firmware Dh-sd5xxxxx Dh-sd5xxxxx Firmware Dh-sd6xxxxx Dh-sd6xxxxx Firmware Ipc-ebw8xxx Ipc-ebw8xxx Firmware Ipc-hdbw1xxx Ipc-hdbw1xxx Firmware Ipc-hdbw2xxx Ipc-hdbw2xxx Firmware Ipc-hdbw4xxx Ipc-hdbw4xxx Firmware Ipc-hdbw5xxx Ipc-hdbw5xxx Firmware Ipc-hdbw8xxx Ipc-hdbw8xxx Firmware Ipc-hdw1xxx Ipc-hdw1xxx Firmware Ipc-hdw2xxx Ipc-hdw2xxx Firmware Ipc-hdw4xxx Ipc-hdw4xxx Firmware Ipc-hdw5xxx Ipc-hdw5xxx Firmware Ipc-hf5xxx Ipc-hf5xxx Firmware Ipc-hf8xxx Ipc-hf8xxx Firmware Ipc-hfw1xxx Ipc-hfw1xxx Firmware Ipc-hfw2xxx Ipc-hfw2xxx Firmware Ipc-hfw4xxx Ipc-hfw4xxx Firmware Ipc-hfw5xxx Ipc-hfw5xxx Firmware Ipc-hfw8xxx Ipc-hfw8xxx Firmware Ipc-hum8xxx Ipc-hum8xxx Firmware Ipc-pdbw8xxx Ipc-pdbw8xxx Firmware Ipc-pfw8xxx Ipc-pfw8xxx Firmware Psd8xxxx Psd8xxxx Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: dahua

Published:

Updated: 2024-09-17T02:31:08.983Z

Reserved: 2017-05-30T00:00:00.000Z

Link: CVE-2017-9315

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2017-11-28T19:29:00.400

Modified: 2025-04-20T01:37:25.860

Link: CVE-2017-9315

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses