critical
9.8
Advisory Published
Updated

CVE-2017-9315

First published: Tue Nov 28 2017(Updated: )

Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.

Credit: cybersecurity@dahuatech.com

Affected SoftwareAffected VersionHow to fix
Dahua IPC-HFW1XXX
Dahua IPC-HFW1XXX
Dahuasecurity DH-IPC-HDW1XXX Firmware
Dahua IPC-HDW1xxx
Dahua Security IPC-HDBW1XXX
Dahuasecurity Ipc-hdbw1xxx Firmware
Dahuasecurity IPC-HFW2XXX Firmware
Dahuasecurity IPC-HFW2XXX Firmware
Dahuasecurity IPC-HDW2XXX Firmware
Dahuasecurity IPC-HDW2XXX Firmware
Dahuasecurity IPC-HDBW2XXX Firmware
Dahua IPC-HDBW2XXX
Dahuasecurity IPC-HFW4XXX
Dahuasecurity IPC-HFW4XXX Firmware
Dahuasecurity IPC-HDW4XXX Firmware
Dahuasecurity IPC-HDW4XXX Firmware
Dahuasecurity Ipc-hdbw4xxx Firmware
Dahuasecurity Ipc-hdbw4xxx Firmware
Dahuasecurity IPC-HF5XXX Firmware
Dahuasecurity IPC-HF5XXX Firmware
Dahuasecurity IPC-HFW5XXX
Dahuasecurity IPC-HFW5X2X Firmware
Dahua IPC-HDW5XXX Firmware
Dahua IPC-HDW5XXX Firmware
Dahuasecurity IPC-HDBW5XXX
Dahuasecurity IPC-HDBW5XXX Firmware
Dahuasecurity IPC-HF8XXX
Dahuasecurity IPC-HF8XXX Firmware
Dahua IPC-HFW8XXX
Dahuasecurity Ipc-hfw8xxx Firmware
Dahuasecurity IPC-EBW8XXX Firmware
Dahua IPC-HDBW8XXX
Dahuasecurity IPC-EBW8XXX Firmware
Dahua IPC-EBW8XXX
Dahua IPC-PFW8XXX
Dahuasecurity IPC-PFW8XXX Firmware
Dahua Security Dh-sd2xxxxx
Dahua Security Dh-sd2xxxxx
Dahua IPC-PDBW8XXX
Dahuasecurity IPC-PDBW8XXX Firmware
Dahuasecurity Ipc-hum8xxx Firmware
Dahuasecurity Ipc-hum8xxx Firmware
Dahua Technology Psd8xxxx
Dahua Technology Psd8xxxx
Dahuasecurity DH-SD4XXXXX Firmware
Dahua DH-SD4XXXXX
Dahua Security DH-SD5xxxxx
Dahua Security DH-SD5xxxxx
Dahuasecurity DH-SD6XXXXX
Dahuasecurity DH-SD6XXXXX Firmware

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is CVE-2017-9315?

    CVE-2017-9315 is a vulnerability in Dahua IP cameras and IP PTZ (Pan-Tilt-Zoom) devices that allows an attacker to compromise the admin password reset mechanism.

  • What is the severity of CVE-2017-9315?

    The severity of CVE-2017-9315 is critical with a severity score of 9.8.

  • How does the vulnerability in Dahua IP cameras and IP PTZ devices work?

    The vulnerability allows an attacker to potentially compromise the algorithm used in the admin password reset mechanism.

  • Which versions of Dahua IP cameras and IP PTZ devices are affected by CVE-2017-9315?

    Dahua IP cameras and IP PTZ devices with the following firmware are affected: Ipc-hfw1xxx, Ipc-hdw1xxx, Ipc-hdbw1xxx, Ipc-hfw2xxx, Ipc-hdw2xxx, Ipc-hdbw2xxx, Ipc-hfw4xxx, Ipc-hdw4xxx, Ipc-hdbw4xxx, Ipc-hf5xxx, Ipc-hfw5xxx, Ipc-hdw5xxx, Ipc-hdbw5xxx, Ipc-hf8xxx, Ipc-hfw8xxx, Ipc-hdbw8xxx, Ipc-ebw8xxx, Ipc-pfw8xxx, Dh-sd2xxxxx, Ipc-pdbw8xxx, Ipc-hum8xxx, Psd8xxxx, Dh-sd4xxxxx, Dh-sd5xxxxx, Dh-sd6xxxxx.

  • How can I fix the vulnerability in Dahua IP cameras and IP PTZ devices?

    To fix the vulnerability, contact a Dahua authorized dealer to receive a time-limited temporary password and reset the admin password.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203