Browse CVEs

CRITICAL 9.8 CVE-2017-9315 Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dea… Ipc Hfw1xxx Firmware Mitigation only Fix from $2,3002017-11-28 HIGH 8.8 CVE-2017-9314 Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171… Nvr5464 16p 4ks2 Firmware Mitigation only Fix from $1,9502017-11-13 HIGH 8.8 CVE-2017-7253 Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request t… Ip Camera Firmware No fix yet Fix from $1,9502017-03-30 HIGH 8.1 CVE-2017-6432 An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which operates on TCP Port 37777, i… Nvr Firmware No fix yet Fix from $1,9502017-03-09 CRITICAL 9.8 CVE-2017-6342EPSS 13% An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and… Camera Firmware Mitigation only Fix from $2,3002017-02-27 HIGH 8.1 CVE-2017-6343EPSS 60% The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and Smart… Camera Firmware Mitigation only Fix from $1,9502017-02-27 MEDIUM 5.9 CVE-2017-6341EPSS 9% Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2… Camera Firmware Mitigation only Fix from $1,6002017-02-27 HIGH 7.5 CVE-2013-6117EPSS 70% Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials,… Dvr Firmware No fix yet Fix from $1,9502014-07-11 HIGH 10.0 CVE-2013-5754 The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which… Dvr0404hd A Mitigation only Fix from $1,9502013-09-17 HIGH 10.0 CVE-2013-3612EPSS 10% Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote a… Dvr0404hd A Mitigation only Fix from $1,9502013-09-17 HIGH 9.3 CVE-2013-3614EPSS 7% Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a brute-forc… Dvr0404hd A No fix yet Fix from $1,9502013-09-17 HIGH 7.8 CVE-2013-3613EPSS 7% Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a repl… Dvr0404hd A Mitigation only Fix from $1,9502013-09-17 HIGH 7.8 CVE-2013-3615EPSS 8% Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleart… Dvr0404hd A Mitigation only Fix from $1,9502013-09-17