CVE-2017-7925 Hardcoded credentials in Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras
Attackers can extract hardcoded passwords from configuration files to assume privileged identities and access sensitive information on Dahua devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-7925?
CVE-2017-7925 is a critical vulnerability in Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras, published on 6 May 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The password in configuration file vulnerability was identified, which could lead to a malicious user assuming the identity of a privileged user and gaining access to sensitive information.
Which versions are affected by CVE-2017-7925?
It affects 15 products.
Products include Dahuasecurity Dh-Hcvr4xxx Firmware, Dahuasecurity Dh-Hcvr5xxx Firmware, Dahuasecurity Dh-Ipc-Hdbw13a0sn Firmware, Dahuasecurity Dh-Ipc-Hdbw23a0rn-Zs Firmware, Dahuasecurity Dh-Ipc-Hdw1xxx Firmware, Dahuasecurity Dh-Ipc-Hdw2xxx Firmware and 9 more.
How do I fix CVE-2017-7925?
No fix has been published for CVE-2017-7925 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-7925 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2017-7925 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras
Sources
Also known as GHSA-c723-9j4v-77qc.