CWE Code: 276
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Incorrect Default Permissions
Summary: some of dahua's debug functions do not have permission separation. low-privileged users can use the debug function after logging in. affected products include: ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x for versions which build time is before august 18,2019.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-09-18
Last Modified Date: 2019-09-19