GCVE - cpe:2.3:h:dahuasecurity:dhi-hcvr7216a-s3:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dahuasecurity:dhi-hcvr7216a-s3:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dahuasecurity (`49e0e28a-d51a-562c-8056-164d442a6fc2`)
Product	Dhi Hcvr7216A S3 (`90c6eec9-8504-5a90-a80a-8535f5f54e03`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-6432`	not_vulnerable	2026-06-08 05:09:51.251548	Details available An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which operates on TCP Port 37777, is an unencrypted, binary protocol. Performing a Man-in-the-Middle attack allows both sniffing and injections of packets, which allows creation of fully privileged new users, in addition to capture of sensitive information. Published: 2017-03-09T17:00:00.000Z Updated: 2024-08-05T15:25:49.294Z Open on db.gcve.eu Reference links https://twitter.com/null_ku7/status/839814344351240193 https://nullku7.github.io/stuff/exploit/dahua/2017/03/09/dahua-nvr-authbypass.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-6343`	not_vulnerable	2026-06-08 05:09:51.125386	Details available The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 allows remote attackers to obtain login access by leveraging knowledge of the MD5 Admin Hash without knowledge of the corresponding password, a different vulnerability than CVE-2013-6117. Published: 2017-02-27T07:25:00.000Z Updated: 2024-08-05T15:25:49.115Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/96449 https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-6342`	not_vulnerable	2026-06-08 05:09:51.124976	Details available An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19. When SmartPSS Software is launched, while on the login screen, the software in the background automatically logs in as admin. This allows sniffing sensitive information identified in CVE-2017-6341 without prior knowledge of the password. This is a different vulnerability than CVE-2013-6117. Published: 2017-02-27T07:25:00.000Z Updated: 2024-08-05T15:25:49.212Z Open on db.gcve.eu Reference links https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html http://www.securityfocus.com/bid/96454	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-6341`	not_vulnerable	2026-06-08 05:09:51.124477	Details available Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 send cleartext passwords in response to requests from the Web Page, Mobile Application, and Desktop Application interfaces, which allows remote attackers to obtain sensitive information by sniffing the network, a different vulnerability than CVE-2013-6117. Published: 2017-02-27T07:25:00.000Z Updated: 2024-08-05T15:25:49.189Z Open on db.gcve.eu Reference links https://twitter.com/null_ku7/status/835649185168838657 https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html http://www.securityfocus.com/bid/96456	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.