CVE:CVE-2017-9314
CNNVD:CNNVD-201705-1394
Dahua NVR50XX等都是中国大华（Dahua）公司的网络硬盘摄像机产品。
多款Dahua产品中存在安全漏洞。攻击者可通过伪造json信息利用该漏洞执行其他操作。以下产品和版本受到影响：Dahua NVR50XX DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102之前的版本；NVR52XX DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102之前的版本；NVR54XX DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102之前的版本；NVR58XX DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102之前的版本。
solution:Upgrade dahuasecurity nvr5464-16p-4ks2_firmware to a higher version than dh_nvr5464_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5464_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5208-8p-4ks2_firmware to a higher version than dh_nvr5208_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5208_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5432-16p-4ks2_firmware to a higher version than dh_nvr5432_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5432_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5416-16p-4ks2_firmware to a higher version than dh_nvr5416_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5416_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5464-4ks2_firmware to a higher version than dh_nvr5464_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5464_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5432-4ks2_firmware to a higher version than dh_nvr5432_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5432_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5416-4ks2_firmware to a higher version than dh_nvr5416_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5416_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5232-16p-4ks2_firmware to a higher version than dh_nvr5232_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5232_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5216-16p-4ks2_firmware to a higher version than dh_nvr5216_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5216_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5232-8p-4ks2_firmware to a higher version than dh_nvr5232_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5232_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5216-8p-4ks2_firmware to a higher version than dh_nvr5216_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5216_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5232-4ks2_firmware to a higher version than dh_nvr5232_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5232_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5216-4ks2_firmware to a higher version than dh_nvr5216_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5216_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5208-4ks2_firmware to a higher version than dh_nvr5208_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5208_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5816-4ks2_firmware to a higher version than dh_nvr5816_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5816_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5832-4ks2_firmware to a higher version than dh_nvr5832_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5832_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5864-4ks2_firmware to a higher version than dh_nvr5864_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5864_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5864-16p-4ks2_firmware to a higher version than dh_nvr5864_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5864_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5832-16p-4ks2_firmware to a higher version than dh_nvr5832_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5832_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5816-16p-4ks2_firmware to a higher version than dh_nvr5816_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5816_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5424-24p-4ks2_firmware to a higher version than dh_nvr5424_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5424_eng_p_v2.616.0000.0.r.20171102); Upgrade dahuasecurity nvr5224-24p-4ks2_firmware to a higher version than dh_nvr5224_eng_p_v2.616.0000.0.r.20171102,and avoid the version (,dh_nvr5224_eng_p_v2.616.0000.0.r.20171102)