What’s Vulnerable › Vulnerabilities

CVE-2017-6432

• Severity: high (CVSS 8.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-03-09 · updated 2026-06-17
• Weakness: CWE-319

Description

An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which operates on TCP Port 37777, is an unencrypted, binary protocol. Performing a Man-in-the-Middle attack allows both sniffing and injections of packets, which allows creation of fully privileged new users, in addition to capture of sensitive information.

Affected products

• Dahuasecurity Nvr Firmware: 3.210.0001.10

References

• https://nullku7.github.io/stuff/exploit/dahua/2017/03/09/dahua-nvr-authbypass.html
• https://twitter.com/null_ku7/status/839814344351240193
• https://nullku7.github.io/stuff/exploit/dahua/2017/03/09/dahua-nvr-authbypass.html
• https://twitter.com/null_ku7/status/839814344351240193

Get alerted when CVE-2017-6432 or the next vulnerability affects your stack