Intrusion PreventionDahua.IP.Camera.Unauthorized.File.Access.Information.Disclosure
Description
This indicates an attack attempting to exploit an Information Disclosure vulnerability in Dahua IP Camera.
This issue is caused by an error in the vulnerable software when handling malicious requests. It may allow remote attackers to access potentially sensitive files.
Affected Products
DH-IPC-HDW23A0RN-ZS
DH-IPC-HDBW23A0RN-ZS
DH-IPC-HDBW13A0SN
DH-IPC-HDW13A0SN
DH-IPC-HFW13A0SN-W
DH-IPC-HDBW13A0SN
DH-IPC-HDW13A0SN
DH-IPC-HFW13A0SN-W
DHI-HCVR51A04HE-S3
DHI-HCVR51A08HE-S3
DHI-HCVR58A32S-S2
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://us.dahuasecurity.com/en/us/Security-Bulletin_030617.php#none
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-06-10 | 14.629 | Severity:medium:high |
| ID | 43956 |
| Created | Apr 25, 2017 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2017-6343 |
| Exploit Prediction Score | 31.25% |
| Default Action | drop |
| Active | |
| Affected OS | Other |
| Affected App | Other |