PT-2017-18002
CVE-2017-7927
·
Publicado
2017-05-06
·
Atualizado
2019-10-09
Descrição por
CVSS 2.0
7.5
AltaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Dahua DH-IPC-HDBW23A0RN-ZS
Dahua DH-IPC-HDBW13A0SN
Dahua DH-IPC-HDW1XXX
Dahua DH-IPC-HDW2XXX
Dahua DH-IPC-HDW4XXX
Dahua DH-IPC-HFW1XXX
Dahua DH-IPC-HFW2XXX
Dahua DH-IPC-HFW4XXX
Dahua DH-SD6CXX
Dahua DH-NVR1XXX
Dahua DH-HCVR4XXX
Dahua DH-HCVR5XXX
Dahua DHI-HCVR51A04HE-S3
Dahua DHI-HCVR51A08HE-S3
Dahua DHI-HCVR58A32S-S2
Description
A Use of Password Hash Instead of Password for Authentication issue was discovered, which could allow a malicious user to bypass authentication without obtaining the actual password.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾