NVD

Id
84782  
Name
CVE-2017-7253  
Description
Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the first JSON object encountered has a Component error: login challenge! message. The second JSON object encountered has a result indicating a successful admin login.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-04-27  
Published
2017-03-30  
Modified Date
2017-04-04  
Seq
2017-7253  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
414199 84782 CVE-2017-6058 http://git.qemu-project.org/?p=qemu.git;a=commit;h=df8bf7a7fe75eb5d5caffa55f5cd4292b757aea6  View
414200 84782 CVE-2017-6058 [oss-security] 20170217 CVE-2017-6058 Qemu: net: vmxnet3: OOB NetRxPkt::ehdr_buf access when doing vlan stripping  View
414201 84782 CVE-2017-6058 96277  View
414202 84782 CVE-2017-6058 1037856  View
414203 84782 CVE-2017-6058 https://bugzilla.redhat.com/show_bug.cgi?id=1423358  View
414204 84782 CVE-2017-6058 [qemu-devel] 20170216 [PATCH 2/5] NetRxPkt: Fix memory corruption on VLAN header stripping  View
414205 84782 CVE-2017-6058 http://git.qemu-project.org/?p=qemu.git;a=commit;h=df8bf7a7fe75eb5d5caffa55f5cd4292b757aea6  View
414206 84782 CVE-2017-6058 [oss-security] 20170217 CVE-2017-6058 Qemu: net: vmxnet3: OOB NetRxPkt::ehdr_buf access when doing vlan stripping  View
414207 84782 CVE-2017-6058 96277  View
414208 84782 CVE-2017-6058 1037856  View
414209 84782 CVE-2017-6058 https://bugzilla.redhat.com/show_bug.cgi?id=1423358  View
414210 84782 CVE-2017-6058 [qemu-devel] 20170216 [PATCH 2/5] NetRxPkt: Fix memory corruption on VLAN header stripping  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66449 JVNDB-2017-002787 Dahua IP Camera デバイスにおける認可・権限・アクセス制御に関する脆弱性 Dahua IP Camera デバイスには、認可・権限・アクセス制御に関する脆弱性が存在します。 CVE-2017-7253 0 CVE-2017-7253 84782 9 8.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002787.html 2017-03-31 2017-04-28 View