CVE-2017-6343

The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS…

published February 27, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.

CVSS
—
EPSS
60%
Percentile
99.1
In the wild
Unconfirmed
What it is

The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 allows remote attackers to obtain login access by leveraging knowledge of the MD5 Admin Hash without knowledge of the corresponding password, a different vulnerability than CVE-2013-6117.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.60349 · 99.1th percentile
Published
2017-02-27T07:25Z
EPSS history
Timeline
  • 22 SEP 03:14Z
    EPSS moved 60% → 23%
    epss
  • 06 SEP 03:11Z
    EPSS moved 60% → 23%
    epss
  • 30 AUG 15:59Z
    EPSS moved 23% → 60%
    epss
  • 29 AUG 04:26Z
    EPSS moved 60% → 23%
    epss
  • 27 FEB 07:25Z
    The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS…
    cvelistv5