Dahuasecurity Ipc-HFW2XXX Firmware vulnerabilities

2 CVEs affecting Dahuasecurity Ipc-HFW2XXX Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-9676, published 2019-06-12.

More from Dahuasecurity.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-9315, published 2017-11-28. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm…
• CVE-2019-9676, published 2019-06-12. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11. The vulnerability exits in the function of redirection display for serial…