CVE-2017-7925
CriticalSummary
A Password in Configuration File issue was identified in Dahua devices such as DH-IPC-HDBW23A0RN-ZS and others. This vulnerability could allow a malicious user to assume the identity of a privileged user and gain access to sensitive information.
Risk Assessment
The organization may be exposed to unauthorized access to data, potentially leading to a loss of confidentiality and integrity of information.
Recommendation
It is recommended to secure configuration files by removing passwords or properly encrypting them, as well as conducting regular security audits of the devices.
Original NVD description (English source)
A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The password in configuration file vulnerability was identified, which could lead to a malicious user assuming the identity of a privileged user and gaining access to sensitive information.