CVE:CVE-2017-9316
CNNVD:CNNVD-201705-1392
Dahua IPC-HDW4300S等都是中国大华（Dahua）公司的IP摄像机设备。
多款Dahua产品中的内部调试功能存在身份验证绕过漏洞。远程攻击者可利用该漏洞造成设备只接受特定的数据或执行代码。以下产品受到影响：Dahua IPC-HDW4300S；NVR11HS；IPC-HFW4X00；IPC-HDW4X00；IPC-HDBW4X00；IPC-HF5X00；IPC-HFW5X00；IPC-HDW5X00；IPC-HDBW5X00。
solution:Upgrade dahuasecurity nvr11hs_firmware to a higher version than 3.210.0000.0.r.20150206,3.210.0000.1.r.20150420,3.210.0000.2.r.20150715,3.210.0000.3.r.20150921,3.210.0000.5.r.20160409,3.210.0000.5.r.20160603,3.210.0000.5.r.20160803,3.210.0000.5.r.20161226,3.210.0000.5.r.20170305,3.210.0000.5.r.20170321,and avoid the version 3.210.0000.0.r.20150206,3.210.0000.1.r.20150420,3.210.0000.2.r.20150715,3.210.0000.3.r.20150921,3.210.0000.5.r.20160409,3.210.0000.5.r.20160603,3.210.0000.5.r.20160803,3.210.0000.5.r.20161226,3.210.0000.5.r.20170305,3.210.0000.5.r.20170321; Upgrade dahuasecurity ipc-hdw4300s_firmware to a higher version than 2.240.0009.0.r.20131015,2.400.0000.0.r.20131231,2.420.0000.0.r.20140419,2.420.0002.0.r.20140621,2.420.0002.0.r.20140724,2.420.0005.0.r.20141205,2.420.0006.0.r.20150311,2.420.0007.0.r.20150409,2.420.0008.0.r.20150710,and avoid the version 2.240.0009.0.r.20131015,2.400.0000.0.r.20131231,2.420.0000.0.r.20140419,2.420.0002.0.r.20140621,2.420.0002.0.r.20140724,2.420.0005.0.r.20141205,2.420.0006.0.r.20150311,2.420.0007.0.r.20150409,2.420.0008.0.r.20150710; Upgrade dahuasecurity ipc-hfw4x00_firmware to a higher version than 2.400.0000.3.r.20150312,2.420.0006.0.r.20150311,and avoid the version 2.400.0000.3.r.20150312,2.420.0006.0.r.20150311; Upgrade dahuasecurity ipc-hdw4x00_firmware to a higher version than 2.400.0000.3.r.20150312,2.420.0006.0.r.20150311,and avoid the version 2.400.0000.3.r.20150312,2.420.0006.0.r.20150311; Upgrade dahuasecurity ipc-hdbw4x00_firmware to a higher version than 2.400.0000.3.r.20150312,2.420.0006.0.r.20150311,and avoid the version 2.400.0000.3.r.20150312,2.420.0006.0.r.20150311; Upgrade dahuasecurity ipc-hf5x00_firmware to a higher version than 2.400.0000.3.r.20150312,2.420.0006.0.r.20150311,and avoid the version 2.400.0000.3.r.20150312,2.420.0006.0.r.20150311; Upgrade dahuasecurity ipc-hfw5x00_firmware to a higher version than 2.400.0000.3.r.20150312,2.420.0006.0.r.20150311,and avoid the version 2.400.0000.3.r.20150312,2.420.0006.0.r.20150311; Upgrade dahuasecurity ipc-hdw5x00_firmware to a higher version than 2.400.0000.3.r.20150312,2.420.0006.0.r.20150311,and avoid the version 2.400.0000.3.r.20150312,2.420.0006.0.r.20150311; Upgrade dahuasecurity ipc-hdbw5x00_firmware to a higher version than 2.400.0000.3.r.20150312,2.420.0006.0.r.20150311,and avoid the version 2.400.0000.3.r.20150312,2.420.0006.0.r.20150311