CVE-2017-6341
Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 send cleartext passwords in response to requests from the Web Page, Mobile Application, and Desktop Application interfaces, which allows remote attackers to obtain sensitive information Čicháním sítě je jiná zranitelnost než CVE-2013-6117.
BID: http://www.securityfocus.com/bid/96456
MISC: https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html
MISC: https://twitter.com/null_ku7/status/835649185168838657
CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6341
published: 27. 2. 2017
