CVE-2017-9316: Medium severity dahua nvr11hs firmware vulnerability

Published Nov 27, 2017

Updated

Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device to receive only specific data (one direction, no transmit) and therefore it was not involved in any instance of collecting user privacy data or allowing remote code execution.

Affected Software

42 affected components

Dahuasecurity Nvr11hs Firmware=3.210.0000.0.r.20150206

Dahuasecurity Nvr11hs Firmware=3.210.0000.1.r.20150420

Dahuasecurity Nvr11hs Firmware=3.210.0000.2.r.20150715

Dahuasecurity Nvr11hs Firmware=3.210.0000.3.r.20150921

Dahuasecurity Nvr11hs Firmware=3.210.0000.5.r.20160409

Dahuasecurity Nvr11hs Firmware=3.210.0000.5.r.20160603

Dahuasecurity Nvr11hs Firmware=3.210.0000.5.r.20160803

Dahuasecurity Nvr11hs Firmware=3.210.0000.5.r.20161226

Dahuasecurity Nvr11hs Firmware=3.210.0000.5.r.20170305

Dahuasecurity Nvr11hs Firmware=3.210.0000.5.r.20170321

Dahuasecurity Nvr11hs

Dahuasecurity Ipc-hdw4300s Firmware=2.240.0009.0.r.20131015

Dahuasecurity Ipc-hdw4300s Firmware=2.400.0000.0.r.20131231

Dahuasecurity Ipc-hdw4300s Firmware=2.420.0000.0.r.20140419

Dahuasecurity Ipc-hdw4300s Firmware=2.420.0002.0.r.20140621

Dahuasecurity Ipc-hdw4300s Firmware=2.420.0002.0.r.20140724

Dahuasecurity Ipc-hdw4300s Firmware=2.420.0005.0.r.20141205

Dahuasecurity Ipc-hdw4300s Firmware=2.420.0006.0.r.20150311

Dahuasecurity Ipc-hdw4300s Firmware=2.420.0007.0.r.20150409

Dahuasecurity Ipc-hdw4300s Firmware=2.420.0008.0.r.20150710

Dahuasecurity Ipc-hdw4300s

Dahuasecurity Ipc-hfw4x00 Firmware=2.400.0000.3.r.20150312

Dahuasecurity Ipc-hfw4x00 Firmware=2.420.0006.0.r.20150311

Dahuasecurity Ipc-hfw4x00

Dahuasecurity Ipc-hdw4x00 Firmware=2.400.0000.3.r.20150312

Dahuasecurity Ipc-hdw4x00 Firmware=2.420.0006.0.r.20150311

Dahuasecurity Ipc-hdw4x00

Dahuasecurity Ipc-hdbw4x00 Firmware=2.400.0000.3.r.20150312

Dahuasecurity Ipc-hdbw4x00 Firmware=2.420.0006.0.r.20150311

Dahuasecurity Ipc-hdbw4x00

Dahuasecurity Ipc-hf5x00 Firmware=2.400.0000.3.r.20150312

Dahuasecurity Ipc-hf5x00 Firmware=2.420.0006.0.r.20150311

Dahuasecurity Ipc-hf5x00

Dahuasecurity Ipc-hfw5x00 Firmware=2.400.0000.3.r.20150312

Dahuasecurity Ipc-hfw5x00 Firmware=2.420.0006.0.r.20150311

Dahuasecurity Ipc-hfw5x00

Dahuasecurity Ipc-hdw5x00 Firmware=2.400.0000.3.r.20150312

Dahuasecurity Ipc-hdw5x00 Firmware=2.420.0006.0.r.20150311

Dahuasecurity Ipc-hdw5x00

Dahuasecurity Ipc-hdbw5x00 Firmware=2.400.0000.3.r.20150312

Dahuasecurity Ipc-hdbw5x00 Firmware=2.420.0006.0.r.20150311

Dahuasecurity Ipc-hdbw5x00

Remediation

Patch Available

http://www.dahuasecurity.com/annoucementsingle/security-advisory--high-risk-vulnerability-found-in-dahua-ipc-hdw4300s-and-some-ip-products_14731_231.html

Event History

Nov 27, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-9316?

CVE-2017-9316 has been classified as a high-severity vulnerability due to its potential impact on firmware upgrade authentication.

How do I fix CVE-2017-9316?

To fix CVE-2017-9316, users should update their Dahua IPC-HDW4300S and affected IP product firmware to the latest version provided by Dahua Security.

What products are affected by CVE-2017-9316?

CVE-2017-9316 affects Dahua IPC-HDW4300S and several versions of the Dahua NVR11HS firmware.

What causes the CVE-2017-9316 vulnerability?

CVE-2017-9316 is caused by an internal debug function that allows an authentication bypass during firmware upgrades.

Is there any public exploit for CVE-2017-9316?

There is no known public exploit for CVE-2017-9316, but the vulnerability presents significant risks if left unpatched.