CVE:CVE-2017-7927
CNNVD:CNNVD-201704-1043
大华DH-IPC-HDBW23A0RN-ZS等都是中国大华（DaHua）公司的摄像头产品。
多款大华产品中存在安全漏洞，该漏洞源于程序使用密码散列替代了密码来执行身份验证。攻击者可利用该漏洞绕过身份验证。以下产品受到影响：大华DH-IPC-HDBW23A0RN-ZS；DH-IPC-HDBW13A0SN；DH-IPC-HDW1XXX；DH-IPC-HDW2XXX；DH-IPC-HDW4XXX；DH-IPC-HFW1XXX；DH-IPC-HFW2XXX；DH-IPC-HFW4XXX；DH-SD6CXX；DH-NVR1XXX；DH-HCVR4XXX；DH-HCVR5XXX；DHI-HCVR51A04HE-S3；DHI-HCVR51A08HE-S3；DHI-HCVR58A32S-S2。
solution:Upgrade dahuasecurity dh-ipc-hdbw23a0rn-zs_firmware to a higher version than -; Upgrade dahuasecurity dh-ipc-hdbw13a0sn_firmware to a higher version than -; Upgrade dahuasecurity dh-ipc-hdw1xxx_firmware to a higher version than -; Upgrade dahuasecurity dh-ipc-hdw2xxx_firmware to a higher version than -; Upgrade dahuasecurity dh-ipc-hdw4xxx_firmware to a higher version than -; Upgrade dahuasecurity dh-ipc-hfw1xxx_firmware to a higher version than -; Upgrade dahuasecurity dh-ipc-hfw2xxx_firmware to a higher version than -; Upgrade dahuasecurity dh-ipc-hfw4xxx_firmware to a higher version than -; Upgrade dahuasecurity dh-sd6cxx_firmware to a higher version than -; Upgrade dahuasecurity dh-nvr1xxx_firmware to a higher version than -; Upgrade dahuasecurity dh-hcvr4xxx_firmware to a higher version than -; Upgrade dahuasecurity dh-hcvr5xxx_firmware to a higher version than -; Upgrade dahuasecurity dhi-hcvr51a04he-s3_firmware to a higher version than -; Upgrade dahuasecurity dhi-hcvr51a08he-s3_firmware to a higher version than -; Upgrade dahuasecurity dhi-hcvr58a32s-s2_firmware to a higher version than -