CVE-2017-9315
CriticalSummary
A customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time-limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised.
Risk Assessment
An attacker could exploit this vulnerability to gain access to the administrator account, posing a serious threat to the security of the device and data.
Recommendation
It is recommended to monitor and restrict access to the password reset feature and to review the algorithm used for generating temporary passwords.
Original NVD description (English source)
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by attacker.