CVE-2017-7253: High severity Dahuasecurity Ip Camera Firmware vulnerability
Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the first JSON object encountered has a "Component error: login challenge!" message. The second JSON object encountered has a result indicating a successful admin login.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7253?
CVE-2017-7253 is considered to have a high severity due to its potential for unauthorized access to device controls.
How do I fix CVE-2017-7253?
To fix CVE-2017-7253, you should change the default credentials of the Dahua IP Camera to strong, unique passwords.
Which devices are affected by CVE-2017-7253?
CVE-2017-7253 affects Dahua IP Camera devices running firmware version 3.200.0001.6.
Can CVE-2017-7253 be exploited remotely?
Yes, CVE-2017-7253 can be exploited remotely if the IP camera is accessible over the internet with the default credentials.
What are the potential consequences of exploiting CVE-2017-7253?
Exploiting CVE-2017-7253 can lead to full control of the IP camera, allowing an attacker to manipulate settings or use it for malicious purposes.