CVE-2017-9315
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time...
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.
- Record
CVE-2017-9315- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.
- Record
CVE-2017-9315- Updated
- 2026-11-02
EUVDEUVD-2017-18250 No score
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.
- Record
EUVD-2017-18250- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hcw2-qh59-gg8h
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time...
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.
- Record
GHSA-hcw2-qh59-gg8h- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
- dahua technologies ip camera and ip ptz ipc-hfw1xxx, ipc-hdw1xxx, ipc-hdbw1xxx, ipc-hfw2xxx, ipc-hdw2xxx, ipc-hdbw2xxx, ipc-hfw4xxx, ipc-hdw4xxx, ipc-hdbw4xxx, ipc-hf5xxx, ipc-hfw5xxx, ipc-hdw5xxx, ipc-hdbw5xxx, ipc-hf8xxx, ipc-hfw8xxx, ipc-hdbw8xxx, ipc-ebw8xxx, ipc-pfw8xxx, ipc-pdbw8xxx, ipc-hum8xxx, psd8xxxx, dh-sd2xxxxx, dh-sd4xxxxx, dh-sd5xxxxx, dh-sd6xxxxx
- dahuasecurity dh-sd2xxxxx firmware
- dahuasecurity dh-sd4xxxxx firmware
- dahuasecurity dh-sd5xxxxx firmware
- dahuasecurity dh-sd6xxxxx firmware
- dahuasecurity ipc-ebw8xxx firmware
- dahuasecurity ipc-hdbw1xxx firmware
- dahuasecurity ipc-hdbw2xxx firmware
- dahuasecurity ipc-hdbw4xxx firmware
- dahuasecurity ipc-hdbw5xxx firmware
- dahuasecurity ipc-hdbw8xxx firmware
- dahuasecurity ipc-hdw1xxx firmware
Show 14 moreShow less
- dahuasecurity ipc-hdw2xxx firmware
- dahuasecurity ipc-hdw4xxx firmware
- dahuasecurity ipc-hdw5xxx firmware
- dahuasecurity ipc-hf5xxx firmware
- dahuasecurity ipc-hf8xxx firmware
- dahuasecurity ipc-hfw1xxx firmware
- dahuasecurity ipc-hfw2xxx firmware
- dahuasecurity ipc-hfw4xxx firmware
- dahuasecurity ipc-hfw5xxx firmware
- dahuasecurity ipc-hfw8xxx firmware
- dahuasecurity ipc-hum8xxx firmware
- dahuasecurity ipc-pdbw8xxx firmware
- dahuasecurity ipc-pfw8xxx firmware
- dahuasecurity psd8xxxx firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-9315 is a critical vulnerability (CVSS 9.8) in Dahua Technologies Ip Camera And Ip Ptz Ipc-hfw1xxx, Ipc-hdw1xxx, Ipc-hdbw1xxx, Ipc-hfw2xxx, Ipc-hdw2xxx, Ipc-hdbw2xxx, Ipc-hfw4xxx, Ipc-hdw4xxx, Ipc-hdbw4xxx, Ipc-hf5xxx, Ipc-hfw5xxx, Ipc-hdw5xxx, Ipc-hdbw5xxx, Ipc-hf8xxx, Ipc-hfw8xxx, Ipc-hdbw8xxx, Ipc-ebw8xxx, Ipc-pfw8xxx, Ipc-pdbw8xxx, Ipc-hum8xxx, Psd8xxxx, Dh-sd2xxxxx, Dh-sd4xxxxx, Dh-sd5xxxxx, Dh-sd6xxxxx, published November 28, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.44%, the 73rd percentile. No source names a fixed version.