← Vulnerability feed

Vulnerability record · CVE-2017-6341 · published 27 February 2017

CVE-2017-6341: Dahuasecurity camera firmware cleartext transmission vulnerability

Dahuasecurity · Camera Firmware

Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 send cleartext passwords in response to requests from the Web Page, Mobile Application, and Desktop Application interfaces, which allows remote attackers to obtain sensitive information by sniffing the network, a different vulnerability than CVE-2013-6117.

5.9 CVSS 3.0 Medium EPSS 8.9% · top 4.9% CWE-319 · Cleartext transmission
5.9CVSS 3.0 base score, v2 4.3
8.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 send cleartext passwords in response to requests from the Web Page, Mobile Application, and Desktop Application interfaces, which allows remote attackers to obtain sensitive information by sniffing the network, a different vulnerability than CVE-2013-6117.

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/96456 Third Party AdvisoryVDB Entry
https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html Third Party Advisory
https://twitter.com/null_ku7/status/835649185168838657 Third Party Advisory
http://www.securityfocus.com/bid/96456 Third Party AdvisoryVDB Entry
https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html Third Party Advisory
https://twitter.com/null_ku7/status/835649185168838657 Third Party Advisory

Track CVE-2017-6341 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-6342Dahuasecurity camera firmware improper privilege management vulnerabilityAn issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and…EPSS 13%8.1CVE-2017-6432Dahuasecurity nvr firmware cleartext transmission vulnerabilityAn issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which operates on TCP Port 37777, i…EPSS 0.91%8.1CVE-2017-6343Dahua NVR and camera web interface authentication bypass via MD5 admin hashThe web interface on Dahua DHI-HCVR7216A-S3 devices (NVR Firmware 3.210.0001.10, Camera Firmware 2.400.0000.28.R, SmartPSS 1.16.1) allows remote atta…EPSS 60%analysed

Source: NIST National Vulnerability Database (record CVE-2017-6341), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.