Back to Database
Status published
High
CVE-2017-9317
Privilege escalation vulnerability found in some Dahua IP devices. Attacker...
Vulnerability Description
Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-9317
Credits & Attribution
No credits recorded in the NVD database.
More from Dahua Technologies
View All →CVE-2017-9316
Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S...
Medium
6.5
CVE-2017-9315
Customer of Dahua IP camera or IP PTZ could submit...
Critical
9.8
CVE-2017-9314
Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX,...
High
8.8
Affected Vendor
Dahua Technologies
View all reports →Affected Software
XVR 5x04, XVR 5x08, XVR 5x16, XVR 7x16, IPC-HDBW4XXX, IPC-HDBW5XXX
Vulnerable Versions:
Build before 2017/09
Timeline
Official Publish:
May 23rd, 2018
Last Modified:
September 16th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.