CVE-2017-9315

Q: What is the severity of CVE-2017-9315?

CVE-2017-9315 has a CVSS score of 9.8 (CRITICAL). This vulnerability affects Dahua IP cameras and IP PTZ devices where the admin password recovery mechanism uses a weak algorithm. Attackers could potentially compromise the temporary password generation to reset admin credentials, leading to unauthorized device access. All customers using affected Dahua devices are impacted.

9.8 CRITICAL

Authentication Bypass

📋 TL;DR

This vulnerability affects Dahua IP cameras and IP PTZ devices where the admin password recovery mechanism uses a weak algorithm. Attackers could potentially compromise the temporary password generation to reset admin credentials, leading to unauthorized device access. All customers using affected Dahua devices are impacted.

💻 Affected Systems

Products:

Dahua IP cameras
Dahua IP PTZ devices

Versions: Specific versions not detailed in advisory

Operating Systems: Embedded firmware

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices using the password recovery mechanism through authorized dealers

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete device takeover allowing attackers to view camera feeds, modify configurations, disable security features, or use devices as network pivots.

🟠

Likely Case

Unauthorized access to camera feeds and device settings, potentially enabling surveillance or disabling security monitoring.

🟢

If Mitigated

Limited impact if devices are behind firewalls with restricted network access and strong perimeter controls.

🌐 Internet-Facing: HIGH

🏢 Internal Only: MEDIUM

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires understanding of the password recovery algorithm and ability to interact with the recovery mechanism

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Not specified in advisory

Vendor Advisory: http://www.dahuasecurity.com/annoucementsingle/security-advisory--admin-password-recovery-mechanism-in-some-dahua-ip-camera-and-ip-ptz-could-lead-to-security-risk_14731_221.html

Restart Required: Yes

Instructions:

1. Contact Dahua support for firmware updates. 2. Apply latest firmware patches. 3. Restart devices after patching. 4. Change admin passwords after update.

🔧 Temporary Workarounds

Disable password recovery feature

all

Disable the admin password recovery mechanism if not required

Network segmentation

all

Isolate cameras on separate VLAN with restricted access

🧯 If You Can't Patch

Disable external access to camera management interfaces
Implement strict firewall rules to limit camera network communication

🔍 How to Verify

Check if Vulnerable:

Check if device uses Dahua password recovery through authorized dealer mechanism

Check Version:

Check device web interface or use manufacturer tools

Verify Fix Applied:

Verify firmware version is updated and password recovery mechanism is patched or disabled

📡 Detection & Monitoring

Log Indicators:

Multiple failed password reset attempts
Unauthorized admin password changes
Unusual access patterns to camera management interface

Network Indicators:

Unexpected traffic to/from camera management ports
Password reset requests to Dahua servers

SIEM Query:

source_ip="camera_network" AND (event_type="password_reset" OR event_type="admin_login")

📊 Metadata

CVE ID: CVE-2017-9315

CVSS v3 Score: 9.8 (CRITICAL)

CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Published: November 28, 2017

Last Updated: April 20, 2025

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Dh Sd2xxxxx Firmware by Dahuasecurity

Dh Sd4xxxxx Firmware by Dahuasecurity

Dh Sd5xxxxx Firmware by Dahuasecurity

Dh Sd6xxxxx Firmware by Dahuasecurity

Ipc Ebw8xxx Firmware by Dahuasecurity

Ipc Hdbw1xxx Firmware by Dahuasecurity

Ipc Hdbw2xxx Firmware by Dahuasecurity

Ipc Hdbw4xxx Firmware by Dahuasecurity

Ipc Hdbw5xxx Firmware by Dahuasecurity

Ipc Hdbw8xxx Firmware by Dahuasecurity

Ipc Hdw1xxx Firmware by Dahuasecurity

Ipc Hdw2xxx Firmware by Dahuasecurity

Ipc Hdw4xxx Firmware by Dahuasecurity

Ipc Hdw5xxx Firmware by Dahuasecurity

Ipc Hf5xxx Firmware by Dahuasecurity

Ipc Hf8xxx Firmware by Dahuasecurity

Ipc Hfw1xxx Firmware by Dahuasecurity

Ipc Hfw2xxx Firmware by Dahuasecurity

Ipc Hfw4xxx Firmware by Dahuasecurity

Ipc Hfw5xxx Firmware by Dahuasecurity

Ipc Hfw8xxx Firmware by Dahuasecurity

Ipc Hum8xxx Firmware by Dahuasecurity

Ipc Pdbw8xxx Firmware by Dahuasecurity

Ipc Pfw8xxx Firmware by Dahuasecurity

Psd8xxxx Firmware by Dahuasecurity