CVE-2017-9314

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.93%

Published

Nov 13, 2017

Modified

May 12, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message.

Weaknesses (CWE)

CWE-287

Affected Products (44)

dahuasecurity · nvr5464-16p-4ks2_firmware (up to dh_nvr5464_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5464-16p-4ks2

dahuasecurity · nvr5208-8p-4ks2_firmware (up to dh_nvr5208_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5208-8p-4ks2

dahuasecurity · nvr5432-16p-4ks2_firmware (up to dh_nvr5432_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5432-16p-4ks2

dahuasecurity · nvr5416-16p-4ks2_firmware (up to dh_nvr5416_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5416-16p-4ks2

dahuasecurity · nvr5464-4ks2_firmware (up to dh_nvr5464_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5464-4ks2

dahuasecurity · nvr5432-4ks2_firmware (up to dh_nvr5432_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5432-4ks2

dahuasecurity · nvr5416-4ks2_firmware (up to dh_nvr5416_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5416-4ks2

dahuasecurity · nvr5232-16p-4ks2_firmware (up to dh_nvr5232_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5232-16p-4ks2

dahuasecurity · nvr5216-16p-4ks2_firmware (up to dh_nvr5216_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5216-16p-4ks2

dahuasecurity · nvr5232-8p-4ks2_firmware (up to dh_nvr5232_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5232-8p-4ks2

dahuasecurity · nvr5216-8p-4ks2_firmware (up to dh_nvr5216_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5216-8p-4ks2

dahuasecurity · nvr5232-4ks2_firmware (up to dh_nvr5232_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5232-4ks2

dahuasecurity · nvr5216-4ks2_firmware (up to dh_nvr5216_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5216-4ks2

dahuasecurity · nvr5208-4ks2_firmware (up to dh_nvr5208_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5208-4ks2

dahuasecurity · nvr5816-4ks2_firmware (up to dh_nvr5816_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5816-4ks2

dahuasecurity · nvr5832-4ks2_firmware (up to dh_nvr5832_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5832-4ks2

dahuasecurity · nvr5864-4ks2_firmware (up to dh_nvr5864_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5864-4ks2

dahuasecurity · nvr5864-16p-4ks2_firmware (up to dh_nvr5864_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5864-16p-4ks2

dahuasecurity · nvr5832-16p-4ks2_firmware (up to dh_nvr5832_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5832-16p-4ks2

dahuasecurity · nvr5816-16p-4ks2_firmware (up to dh_nvr5816_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5816-16p-4ks2

dahuasecurity · nvr5424-24p-4ks2_firmware (up to dh_nvr5424_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5424-24p-4ks2

dahuasecurity · nvr5224-24p-4ks2_firmware (up to dh_nvr5224_eng_p_v2.616.0000.0.r.20171102)vulnerable

dahuasecurity · nvr5224-24p-4ks2

References (2)

http://www.dahuasecurity.com/annoucementsingle/security-advisory--authentication-vulnerability-found-in-some-dahua-nvr_14731_211.html

Issue TrackingVendor Advisory

http://www.dahuasecurity.com/annoucementsingle/security-advisory--authentication-vulnerability-found-in-some-dahua-nvr_14731_211.html

Issue TrackingVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs