Skip to main content

Dahua Digital Video Recorders and IP Cameras Vulnerability

Last Update Date: 8 May 2017 10:46 Release Date: 8 May 2017 3270 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

TYPE: Other Servers

A vulnerability has been identified in Dahua Digital Video Recorders and IP Cameras, which can be exploited by remote attacker to bypass authentication on the target system.


Impact

  • Elevation of Privilege
  • Security Restriction Bypass

System / Technologies affected

Network cameras are affected:

  • DH-IPC-HDBW23A0RN-ZS
  • DH-IPC-HDBW13A0SN
  • DH-IPC-HDW1XXX
  • DH-IPC-HDW2XXX
  • DH-IPC-HDW4XXX
  • DH-IPC-HFW1XXX
  • DH-IPC-HFW2XXX
  • DH-IPC-HFW4XXX
  • DH-SD6CXX
  • DH-NVR1XXX
  • DH-HCVR4XXX
  • DH-HCVR5XXX
 
Digital Video Recorders (DVRs) are affected:
  • DHI-HCVR51A04HE-S3
  • DHI-HCVR51A08HE-S3
  • DHI-HCVR58A32S-S2

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • Update to fixed firmware version

 


Vulnerability Identifier


Source


Related Link