CVE-2017-9316
Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP...
Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device to receive only specific data (one direction, no transmit) and therefore it was not involved in any instance of collecting user privacy data or allowing remote code execution.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device to receive only specific data (one direction, no transmit) and therefore it was not involved in any instance of collecting user privacy data or allowing remote code execution.
- Record
CVE-2017-9316- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H - CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device to receive only specific data (one direction, no transmit) and therefore it was not involved in any instance of collecting user privacy data or allowing remote code execution.
- Record
CVE-2017-9316- Updated
- 2026-11-02
EUVDEUVD-2017-18251 No score
Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device to receive only specific data (one direction, no transmit) and therefore it was not involved in any instance of collecting user privacy data or allowing remote code execution.
- Record
EUVD-2017-18251- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mgmj-4r54-qfxp
Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP...
Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device to receive only specific data (one direction, no transmit) and therefore it was not involved in any instance of collecting user privacy data or allowing remote code execution.
- Record
GHSA-mgmj-4r54-qfxp- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H - Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
- dahua technologies ipc-hdw4300s\nvr11hs\ipc-hfw4x00\ipc-hdw4x00\ipc-hdbw4x00\ipc-hf5x00\ipc-hfw5x00\ipc-hdw5x00\ipc-hdbw5x00\nvr11hs
- dahuasecurity ipc-hdbw4x00 firmware
- dahuasecurity ipc-hdbw5x00 firmware
- dahuasecurity ipc-hdw4300s firmware
- dahuasecurity ipc-hdw4x00 firmware
- dahuasecurity ipc-hdw5x00 firmware
- dahuasecurity ipc-hf5x00 firmware
- dahuasecurity ipc-hfw4x00 firmware
- dahuasecurity ipc-hfw5x00 firmware
- dahuasecurity nvr11hs firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-9316 is a medium vulnerability (CVSS 6.5) in Dahua Technologies Ipc-hdw4300s\nvr11hs\ipc-hfw4x00\ipc-hdw4x00\ipc-hdbw4x00\ipc-hf5x00\ipc-hfw5x00\ipc-hdw5x00\ipc-hdbw5x00\nvr11hs, published November 27, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.89%, the 79th percentile. No source names a fixed version.