CWE Code: 522
Vulnerability Type: privilege_escalation
CVSS Score: 5.0
CWE Name:  Insufficiently Protected Credentials
Summary: a password in configuration file issue was discovered in dahua dh-ipc-hdbw23a0rn-zs, dh-ipc-hdbw13a0sn, dh-ipc-hdw1xxx, dh-ipc-hdw2xxx, dh-ipc-hdw4xxx, dh-ipc-hfw1xxx, dh-ipc-hfw2xxx, dh-ipc-hfw4xxx, dh-sd6cxx, dh-nvr1xxx, dh-hcvr4xxx, dh-hcvr5xxx, dhi-hcvr51a04he-s3, dhi-hcvr51a08he-s3, and dhi-hcvr58a32s-s2 devices. the password in configuration file vulnerability was identified, which could lead to a malicious user assuming the identity of a privileged user and gaining access to sensitive information.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2017-05-06
Last Modified Date: 2019-10-09