CVE-2017-9314
Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with...
Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message.
- Record
CVE-2017-9314- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message.
- Record
CVE-2017-9314- Updated
- 2026-11-02
EUVDEUVD-2017-18249 No score
Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message.
- Record
EUVD-2017-18249- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-43r4-72q9-7mv7
Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with...
Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message.
- Record
GHSA-43r4-72q9-7mv7- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
- dahua technologies nvr50xx, vr52xx, vr54xx, vr58xx
- dahuasecurity nvr5208-4ks2 firmware
- dahuasecurity nvr5208-8p-4ks2 firmware
- dahuasecurity nvr5216-16p-4ks2 firmware
- dahuasecurity nvr5216-4ks2 firmware
- dahuasecurity nvr5216-8p-4ks2 firmware
- dahuasecurity nvr5224-24p-4ks2 firmware
- dahuasecurity nvr5232-16p-4ks2 firmware
- dahuasecurity nvr5232-4ks2 firmware
- dahuasecurity nvr5232-8p-4ks2 firmware
- dahuasecurity nvr5416-16p-4ks2 firmware
- dahuasecurity nvr5416-4ks2 firmware
Show 11 moreShow less
- dahuasecurity nvr5424-24p-4ks2 firmware
- dahuasecurity nvr5432-16p-4ks2 firmware
- dahuasecurity nvr5432-4ks2 firmware
- dahuasecurity nvr5464-16p-4ks2 firmware
- dahuasecurity nvr5464-4ks2 firmware
- dahuasecurity nvr5816-16p-4ks2 firmware
- dahuasecurity nvr5816-4ks2 firmware
- dahuasecurity nvr5832-16p-4ks2 firmware
- dahuasecurity nvr5832-4ks2 firmware
- dahuasecurity nvr5864-16p-4ks2 firmware
- dahuasecurity nvr5864-4ks2 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-9314 is a high vulnerability (CVSS 8.8) in Dahua Technologies Nvr50xx, Vr52xx, Vr54xx, Vr58xx, published November 13, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.93%, the 60th percentile. No source names a fixed version.