Dahuasecurity Ipc-HDBW4XXX Firmware vulnerabilities

2 CVEs affecting Dahuasecurity Ipc-HDBW4XXX Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-9317, published 2018-05-23.

More from Dahuasecurity.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-9315, published 2017-11-28. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm…
• CVE-2017-9317, published 2018-05-23. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further…