{"advisories":[{"id":"EUVD-2017-16898","source":"euvd","title":"A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The use of password hash instead of password for authentication vulnerability was identified, which could allow a malicious user to bypass authentication without obtaining the actual password.","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-16898"}],"cve":"CVE-2017-7927","epss":{"score":0.36747},"mitre":{"cpes":[],"created":"2017-05-06T00:00:00+00:00","description":"A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The use of password hash instead of password for authentication vulnerability was identified, which could allow a malicious user to bypass authentication without obtaining the actual password.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2017/7xxx/CVE-2017-7927.json","references":["http://us.dahuasecurity.com/en/us/Security-Bulletin_030617.php","http://www.securityfocus.com/bid/98312","https://ics-cert.us-cert.gov/advisories/ICSA-17-124-02"],"title":null,"updated":"2024-08-05T16:19:29.227000+00:00","vendors":[],"weaknesses":["CWE-836"]},"nvd":{"cpes":["cpe:2.3:h:dahuasecurity:ddh-hcvr4xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-hcvr5xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hdbw13a0sn:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hdbw23a0rn-zs:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hdw1xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hdw2xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hdw4xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hfw1xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hfw2xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hfw4xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-nvr1xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-sd6cxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dhi-hcvr51a04he-s3:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dhi-hcvr51a08he-s3:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dhi-hcvr58a32s-s2:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-hcvr4xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-hcvr5xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hdbw13a0sn_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hdbw23a0rn-zs_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hdw1xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hdw2xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hdw4xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hfw1xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hfw2xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hfw4xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-nvr1xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-sd6cxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dhi-hcvr51a04he-s3_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dhi-hcvr51a08he-s3_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dhi-hcvr58a32s-s2_firmware:-:*:*:*:*:*:*:*"],"created":"2017-05-06T00:29:00.460000+00:00","description":"A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The use of password hash instead of password for authentication vulnerability was identified, which could allow a malicious user to bypass authentication without obtaining the actual password.","metrics":{"cvssV2_0":{"score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P"},"cvssV3_0":{"score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},"cvssV3_1":{},"cvssV4_0":{}},"nvd_repo_path":"2017/CVE-2017-7927.json","references":["http://us.dahuasecurity.com/en/us/Security-Bulletin_030617.php","http://www.securityfocus.com/bid/98312","https://ics-cert.us-cert.gov/advisories/ICSA-17-124-02"],"title":null,"updated":"2026-06-17T01:25:29.733000+00:00","vendors":["dahuasecurity","dahuasecurity$PRODUCT$ddh-hcvr4xxx","dahuasecurity$PRODUCT$dh-hcvr4xxx_firmware","dahuasecurity$PRODUCT$dh-hcvr5xxx","dahuasecurity$PRODUCT$dh-hcvr5xxx_firmware","dahuasecurity$PRODUCT$dh-ipc-hdbw13a0sn","dahuasecurity$PRODUCT$dh-ipc-hdbw13a0sn_firmware","dahuasecurity$PRODUCT$dh-ipc-hdbw23a0rn-zs","dahuasecurity$PRODUCT$dh-ipc-hdbw23a0rn-zs_firmware","dahuasecurity$PRODUCT$dh-ipc-hdw1xxx","dahuasecurity$PRODUCT$dh-ipc-hdw1xxx_firmware","dahuasecurity$PRODUCT$dh-ipc-hdw2xxx","dahuasecurity$PRODUCT$dh-ipc-hdw2xxx_firmware","dahuasecurity$PRODUCT$dh-ipc-hdw4xxx","dahuasecurity$PRODUCT$dh-ipc-hdw4xxx_firmware","dahuasecurity$PRODUCT$dh-ipc-hfw1xxx","dahuasecurity$PRODUCT$dh-ipc-hfw1xxx_firmware","dahuasecurity$PRODUCT$dh-ipc-hfw2xxx","dahuasecurity$PRODUCT$dh-ipc-hfw2xxx_firmware","dahuasecurity$PRODUCT$dh-ipc-hfw4xxx","dahuasecurity$PRODUCT$dh-ipc-hfw4xxx_firmware","dahuasecurity$PRODUCT$dh-nvr1xxx","dahuasecurity$PRODUCT$dh-nvr1xxx_firmware","dahuasecurity$PRODUCT$dh-sd6cxx","dahuasecurity$PRODUCT$dh-sd6cxx_firmware","dahuasecurity$PRODUCT$dhi-hcvr51a04he-s3","dahuasecurity$PRODUCT$dhi-hcvr51a04he-s3_firmware","dahuasecurity$PRODUCT$dhi-hcvr51a08he-s3","dahuasecurity$PRODUCT$dhi-hcvr51a08he-s3_firmware","dahuasecurity$PRODUCT$dhi-hcvr58a32s-s2","dahuasecurity$PRODUCT$dhi-hcvr58a32s-s2_firmware"],"weaknesses":["CWE-798","CWE-836"]},"opencve":{"changes":[],"cpes":{"data":["cpe:2.3:h:dahuasecurity:ddh-hcvr4xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-hcvr5xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hdbw13a0sn:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hdbw23a0rn-zs:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hdw1xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hdw2xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hdw4xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hfw1xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hfw2xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-ipc-hfw4xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-nvr1xxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dh-sd6cxx:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dhi-hcvr51a04he-s3:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dhi-hcvr51a08he-s3:-:*:*:*:*:*:*:*","cpe:2.3:h:dahuasecurity:dhi-hcvr58a32s-s2:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-hcvr4xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-hcvr5xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hdbw13a0sn_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hdbw23a0rn-zs_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hdw1xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hdw2xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hdw4xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hfw1xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hfw2xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-ipc-hfw4xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-nvr1xxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dh-sd6cxx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dhi-hcvr51a04he-s3_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dhi-hcvr51a08he-s3_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:dahuasecurity:dhi-hcvr58a32s-s2_firmware:-:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2017-05-06T00:00:00+00:00","provider":"mitre"},"description":{"data":"A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The use of password hash instead of password for authentication vulnerability was identified, which could allow a malicious user to bypass authentication without obtaining the actual password.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{"score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P"},"provider":"nvd"},"cvssV3_0":{"data":{"score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},"provider":"nvd"},"cvssV3_1":{"data":{},"provider":null},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.36747},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{},"provider":null},"threat_severity":{"data":null,"provider":null}},"references":{"data":["http://us.dahuasecurity.com/en/us/Security-Bulletin_030617.php","http://www.securityfocus.com/bid/98312","https://ics-cert.us-cert.gov/advisories/ICSA-17-124-02"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2025-04-20T01:37:25.860000+00:00","provider":"nvd"},"vendors":{"data":["dahuasecurity","dahuasecurity$PRODUCT$ddh-hcvr4xxx","dahuasecurity$PRODUCT$dh-hcvr4xxx_firmware","dahuasecurity$PRODUCT$dh-hcvr5xxx","dahuasecurity$PRODUCT$dh-hcvr5xxx_firmware","dahuasecurity$PRODUCT$dh-ipc-hdbw13a0sn","dahuasecurity$PRODUCT$dh-ipc-hdbw13a0sn_firmware","dahuasecurity$PRODUCT$dh-ipc-hdbw23a0rn-zs","dahuasecurity$PRODUCT$dh-ipc-hdbw23a0rn-zs_firmware","dahuasecurity$PRODUCT$dh-ipc-hdw1xxx","dahuasecurity$PRODUCT$dh-ipc-hdw1xxx_firmware","dahuasecurity$PRODUCT$dh-ipc-hdw2xxx","dahuasecurity$PRODUCT$dh-ipc-hdw2xxx_firmware","dahuasecurity$PRODUCT$dh-ipc-hdw4xxx","dahuasecurity$PRODUCT$dh-ipc-hdw4xxx_firmware","dahuasecurity$PRODUCT$dh-ipc-hfw1xxx","dahuasecurity$PRODUCT$dh-ipc-hfw1xxx_firmware","dahuasecurity$PRODUCT$dh-ipc-hfw2xxx","dahuasecurity$PRODUCT$dh-ipc-hfw2xxx_firmware","dahuasecurity$PRODUCT$dh-ipc-hfw4xxx","dahuasecurity$PRODUCT$dh-ipc-hfw4xxx_firmware","dahuasecurity$PRODUCT$dh-nvr1xxx","dahuasecurity$PRODUCT$dh-nvr1xxx_firmware","dahuasecurity$PRODUCT$dh-sd6cxx","dahuasecurity$PRODUCT$dh-sd6cxx_firmware","dahuasecurity$PRODUCT$dhi-hcvr51a04he-s3","dahuasecurity$PRODUCT$dhi-hcvr51a04he-s3_firmware","dahuasecurity$PRODUCT$dhi-hcvr51a08he-s3","dahuasecurity$PRODUCT$dhi-hcvr51a08he-s3_firmware","dahuasecurity$PRODUCT$dhi-hcvr58a32s-s2","dahuasecurity$PRODUCT$dhi-hcvr58a32s-s2_firmware"],"providers":["nvd"]},"weaknesses":{"data":["CWE-798","CWE-836"],"providers":["mitre","nvd"]}}}