VULNERABILITY INTELLIGENCE
CVE-2017-9317
CVSS score8.8 HIGH
EPSS probability0.96%
CISA KEVNot currently listed
Published2018-05-23
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device.
Primary references
- cybersecurity@dahuatech.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory