CVE-2017-9316

6.5 mediumEPSS 1.9%

Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device to receive only specific data (one direction, no transmit) and therefore it was not involved in any instance of collecting user privacy data or allowing remote code execution.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2017-11-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dahuasecurity:ipc-hdbw4x00_firmware
dahuasecurity:ipc-hdbw5x00_firmware
dahuasecurity:ipc-hdw4300s_firmware
dahuasecurity:ipc-hdw4x00_firmware
dahuasecurity:ipc-hdw5x00_firmware
dahuasecurity:ipc-hf5x00_firmware
dahuasecurity:ipc-hfw4x00_firmware
dahuasecurity:ipc-hfw5x00_firmware
dahuasecurity:nvr11hs_firmware

References

Check your stack JSON