PT-2017-18002

CVE-2017-7927

·

Publicado

2017-05-06

·

Atualizado

2019-10-09

Descrição por

CVSS 2.0
7.5
Alta
MétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Dahua DH-IPC-HDBW23A0RN-ZS Dahua DH-IPC-HDBW13A0SN Dahua DH-IPC-HDW1XXX Dahua DH-IPC-HDW2XXX Dahua DH-IPC-HDW4XXX Dahua DH-IPC-HFW1XXX Dahua DH-IPC-HFW2XXX Dahua DH-IPC-HFW4XXX Dahua DH-SD6CXX Dahua DH-NVR1XXX Dahua DH-HCVR4XXX Dahua DH-HCVR5XXX Dahua DHI-HCVR51A04HE-S3 Dahua DHI-HCVR51A08HE-S3 Dahua DHI-HCVR58A32S-S2
Description A Use of Password Hash Instead of Password for Authentication issue was discovered, which could allow a malicious user to bypass authentication without obtaining the actual password.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾