CVE-2017-9315: Dahuasecurity Dh-SD2XXXXX Firmware

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.

Affected products

  • Dahuasecurity Dh-SD2XXXXX Firmware: affected versions not specified
  • Dahuasecurity Dh-SD4XXXXX Firmware: affected versions not specified
  • Dahuasecurity Dh-SD5XXXXX Firmware: affected versions not specified
  • Dahuasecurity Dh-SD6XXXXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-EBW8XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HDBW1XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HDBW2XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HDBW4XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HDBW5XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HDBW8XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HDW1XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HDW2XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HDW4XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HDW5XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HF5XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HF8XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HFW1XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HFW2XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HFW4XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HFW5XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HFW8XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-HUM8XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-PDBW8XXX Firmware: affected versions not specified
  • Dahuasecurity Ipc-PFW8XXX Firmware: affected versions not specified
  • Dahuasecurity PSD8XXXX Firmware: affected versions not specified

Published 2017-11-28. Last modified 2026-06-17.