Privilege Escalation in Dahua IP Devices

CVE-2017-9317

What is CVE-2017-9317?

This vulnerability affects several Dahua IP devices, allowing an attacker with a low-privilege account to escalate their access. By exploiting this flaw, attackers can obtain sensitive credential information associated with high-privilege accounts. This capability enables further unauthorized access to device functionalities and sensitive information, posing significant risks to device security and user privacy.

References