What’s Vulnerable › Vulnerabilities

CVE-2017-9315

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-28 · updated 2026-06-17

Description

Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.

Affected products

• Dahuasecurity Dh-Sd2Xxxxx Firmware: all versions
• Dahuasecurity Dh-Sd4Xxxxx Firmware: all versions
• Dahuasecurity Dh-Sd5Xxxxx Firmware: all versions
• Dahuasecurity Dh-Sd6Xxxxx Firmware: all versions
• Dahuasecurity Ipc-Ebw8Xxx Firmware: all versions
• Dahuasecurity Ipc-Hdbw1Xxx Firmware: all versions
• Dahuasecurity Ipc-Hdbw2Xxx Firmware: all versions
• Dahuasecurity Ipc-Hdbw4Xxx Firmware: all versions
• Dahuasecurity Ipc-Hdbw5Xxx Firmware: all versions
• Dahuasecurity Ipc-Hdbw8Xxx Firmware: all versions
• Dahuasecurity Ipc-Hdw1Xxx Firmware: all versions
• Dahuasecurity Ipc-Hdw2Xxx Firmware: all versions
• Dahuasecurity Ipc-Hdw4Xxx Firmware: all versions
• Dahuasecurity Ipc-Hdw5Xxx Firmware: all versions
• Dahuasecurity Ipc-Hf5Xxx Firmware: all versions
• Dahuasecurity Ipc-Hf8Xxx Firmware: all versions
• Dahuasecurity Ipc-Hfw1Xxx Firmware: all versions
• Dahuasecurity Ipc-Hfw2Xxx Firmware: all versions
• Dahuasecurity Ipc-Hfw4Xxx Firmware: all versions
• Dahuasecurity Ipc-Hfw5Xxx Firmware: all versions
• Dahuasecurity Ipc-Hfw8Xxx Firmware: all versions
• Dahuasecurity Ipc-Hum8Xxx Firmware: all versions
• Dahuasecurity Ipc-Pdbw8Xxx Firmware: all versions
• Dahuasecurity Ipc-Pfw8Xxx Firmware: all versions
• Dahuasecurity Psd8Xxxx Firmware: all versions

References

• http://www.dahuasecurity.com/annoucementsingle/security-advisory--admin-password-recovery-mechanism-in-some-dahua-ip-camera-and-ip-ptz-could-lead-to-security-risk_14731_221.html
• http://www.dahuasecurity.com/annoucementsingle/security-advisory--admin-password-recovery-mechanism-in-some-dahua-ip-camera-and-ip-ptz-could-lead-to-security-risk_14731_221.html

Get alerted when CVE-2017-9315 or the next vulnerability affects your stack