Test ID:	1.3.6.1.4.1.25623.1.0.140185
Category:	Web application abuses
Title:	Dahua Devices Authentication Bypass Vulnerability
Summary:	The remote Dahua device is prone to an authentication-bypass; vulnerability.
Description:	Summary: The remote Dahua device is prone to an authentication-bypass vulnerability. Vulnerability Impact: An attacker can exploit this issue to bypass authentication mechanism and perform unauthorized actions. This may lead to further attacks. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-6343 BugTraq ID: 96449 http://www.securityfocus.com/bid/96449 https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html Common Vulnerability Exposure (CVE) ID: CVE-2017-7253 BugTraq ID: 97263 http://www.securityfocus.com/bid/97263 https://gist.github.com/anonymous/16aca69b7dea27cb73ddebb0d9033b02 Common Vulnerability Exposure (CVE) ID: CVE-2017-7927 BugTraq ID: 98312 http://www.securityfocus.com/bid/98312 http://us.dahuasecurity.com/en/us/Security-Bulletin_030617.php https://ics-cert.us-cert.gov/advisories/ICSA-17-124-02 Common Vulnerability Exposure (CVE) ID: CVE-2017-7925 Common Vulnerability Exposure (CVE) ID: CVE-2017-6432 https://nullku7.github.io/stuff/exploit/dahua/2017/03/09/dahua-nvr-authbypass.html https://twitter.com/null_ku7/status/839814344351240193 Common Vulnerability Exposure (CVE) ID: CVE-2017-6341 BugTraq ID: 96456 http://www.securityfocus.com/bid/96456 https://twitter.com/null_ku7/status/835649185168838657 Common Vulnerability Exposure (CVE) ID: CVE-2017-6342 BugTraq ID: 96454 http://www.securityfocus.com/bid/96454
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.