Strix
26.1K

CVE-2017-9314

UnknownEPSS 0.93%

Last modified

CVE-2017-9314 is a vulnerability of currently unknown severity. Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message.. EPSS estimates a 0.93% chance of exploitation in the next 30 days.

Description

Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message.

Metrics

EPSS Probability
0.93%

56.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
DahuasecurityNvr5464-16p-4ks2 Firmware< dh_nvr5464_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5208-8p-4ks2 Firmware< dh_nvr5208_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5432-16p-4ks2 Firmware< dh_nvr5432_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5416-16p-4ks2 Firmware< dh_nvr5416_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5464-4ks2 Firmware< dh_nvr5464_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5432-4ks2 Firmware< dh_nvr5432_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5416-4ks2 Firmware< dh_nvr5416_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5232-16p-4ks2 Firmware< dh_nvr5232_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5216-16p-4ks2 Firmware< dh_nvr5216_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5232-8p-4ks2 Firmware< dh_nvr5232_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5216-8p-4ks2 Firmware< dh_nvr5216_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5232-4ks2 Firmware< dh_nvr5232_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5216-4ks2 Firmware< dh_nvr5216_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5208-4ks2 Firmware< dh_nvr5208_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5816-4ks2 Firmware< dh_nvr5816_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5832-4ks2 Firmware< dh_nvr5832_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5864-4ks2 Firmware< dh_nvr5864_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5864-16p-4ks2 Firmware< dh_nvr5864_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5832-16p-4ks2 Firmware< dh_nvr5832_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5816-16p-4ks2 Firmware< dh_nvr5816_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5424-24p-4ks2 Firmware< dh_nvr5424_eng_p_v2.616.0000.0.r.20171102
DahuasecurityNvr5224-24p-4ks2 Firmware< dh_nvr5224_eng_p_v2.616.0000.0.r.20171102

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2017-9314?
Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message.
How severe is CVE-2017-9314?
Severity scoring for CVE-2017-9314 is pending analysis. The EPSS model estimates a 0.93% probability of exploitation in the next 30 days.
How do I fix CVE-2017-9314?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-9314?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST