CVE-2017-9315 Auth bypass in Dahua IP Camera and IP PTZ IPC-HFW1XXX, IPC-HDW1XXX, IPC-HDBW1XXX, IPC-HFW2XXX, IPC-HDW2XXX, IPC-HDBW2XXX, IPC-HFW4XXX, IPC-HDW4XXX, IPC-HDBW4XXX, IPC-HF5XXX, IPC-HFW5XXX, IPC-HDW5XXX, IPC-HDBW5XXX, IPC-HF8XXX, IPC-HFW8XXX, IPC-HDBW8XXX, IPC-EBW8XXX, IPC-PFW8xxx, IPC-PDBW8xxx, IPC-HUM8xxx, PSD8xxxx, DH-SD2XXXXX, DH-SD4XXXXX, DH-SD5XXXXX, DH-SD6XXXXX
Attackers can compromise the temporary password reset algorithm to gain unauthorized admin access to Dahua IP cameras and PTZ devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-9315?
CVE-2017-9315 is a critical authentication bypass vulnerability in Dahua IP Camera and IP PTZ IPC-HFW1XXX, IPC-HDW1XXX, IPC-HDBW1XXX, IPC-HFW2XXX, IPC-HDW2XXX, IPC-HDBW2XXX, IPC-HFW4XXX, IPC-HDW4XXX, IPC-HDBW4XXX, IPC-HF5XXX, IPC-HFW5XXX, IPC-HDW5XXX, IPC-HDBW5XXX, IPC-HF8XXX, IPC-HFW8XXX, IPC-HDBW8XXX, IPC-EBW8XXX, IPC-PFW8xxx, IPC-PDBW8xxx, IPC-HUM8xxx, PSD8xxxx, DH-SD2XXXXX, DH-SD4XXXXX, DH-SD5XXXXX, DH-SD6XXXXX, published on 28 Nov 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.
Which versions are affected by CVE-2017-9315?
It affects 25 products.
Products include Dahuasecurity Dh-Sd2xxxxx Firmware, Dahuasecurity Dh-Sd4xxxxx Firmware, Dahuasecurity Dh-Sd5xxxxx Firmware, Dahuasecurity Dh-Sd6xxxxx Firmware, Dahuasecurity Ipc-Ebw8xxx Firmware, Dahuasecurity Ipc-Hdbw1xxx Firmware and 19 more.
How do I fix CVE-2017-9315?
No fix has been published for CVE-2017-9315 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2017-9315 being exploited?
There is no known exploitation of CVE-2017-9315 in the wild and no public exploit code.
Sources
Also known as GHSA-hcw2-qh59-gg8h.