CVE:CVE-2017-9317
CNNVD:CNNVD-201705-1391
Dahua XVR 5x04等都是中国大华（DaHua）公司的产品。Dahua XVR 5x04是一款网络硬盘录像机设备。IPC-HDBW4XXX是一款网络摄像机产品。
多款Dahua设备中存在提权漏洞。攻击者可利用该漏洞获取凭证信息的访问权限，进而访问设备信息。以下产品受到影响：Dahua XVR 5x04；XVR 5x08；XVR 5x16；XVR 7x16；IPC-HDBW4XXX；IPC-HDBW5XXX。
solution:Upgrade dahuasecurity xvr5x16_firmware to a higher version than 3.218.0000002.1.r.171229,and avoid the version (,3.218.0000002.1.r.171229); Upgrade dahuasecurity xvr5x08_firmware to a higher version than 3.218.0000002.1.r.171229,and avoid the version (,3.218.0000002.1.r.171229); Upgrade dahuasecurity xvr5x04_firmware to a higher version than 3.218.0000002.1.r.171229,and avoid the version (,3.218.0000002.1.r.171229); Upgrade dahuasecurity xvr7x16_firmware to a higher version than 3.218.0000002.1.r.171229,and avoid the version (,3.218.0000002.1.r.171229); Upgrade dahuasecurity ipc-hdbw4xxx_firmware to a higher version than 2.622.0000000.18.r.20171110,2.621.0000.28.r.20170912,and avoid the version (,2.622.0000000.18.r.20171110),(,2.621.0000.28.r.20170912); Upgrade dahuasecurity ipc-hdbw5xxx_firmware to a higher version than 2.622.0000000.18.r.20171110,2.621.0000.28.r.20170912,and avoid the version (,2.622.0000000.18.r.20171110),(,2.621.0000.28.r.20170912)