Cyber Resilience

CVE-2017-7925

Exposed Creds in Dahuasecurity Dh-Ipc-Hdbw23A0Rn-Zs Firmware

High EPSSExposed Creds
Published
06 May 2017
Modified
13 May 2026
Patch / advisory
CVSS Score v3 9.8
Click a component to see what it means
Raw vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.51 99th percentile
Risk Priority 97 floored blend · peak EPSS

Summary

CVE-2017-7925 is a critical-severity Password in Configuration File (CWE-260) vulnerability in Dahuasecurity Dh-Ipc-Hdbw23A0Rn-Zs Firmware. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability Data

A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2 devices. The password in configuration file vulnerability was identified, which could lead to a…

more

malicious user assuming the identity of a privileged user and gaining access to sensitive information.

CWE(s)

Related Threats

Likely ATT&CK TechniquesAI

Techniques this vulnerability likely enables, inferred from its description, weakness type, and attributed-actor tradecraft. Confidence is per-technique.

T1552.001 Credentials In Files Credential Accessconfidence: HIGH
Hard-coded or stored credentials in a configuration file directly enable credential access from local files.
T1078 Valid Accounts Stealthconfidence: HIGH
Obtained credentials allow the attacker to authenticate as a privileged user on the device.
T1005 Data from Local System Collectionconfidence: MEDIUM
The configuration file containing the password is read from the local system.
inferred from description + CWE · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2021-33044Same vendor: Dahuasecurity
CVE-2024-39950Same vendor: Dahuasecurity
CVE-2024-39946Same vendor: Dahuasecurity
CVE-2024-39948Same vendor: Dahuasecurity
CVE-2023-3121Same vendor: Dahuasecurity
CVE-2021-33045Same vendor: Dahuasecurity
CVE-2024-39947Same vendor: Dahuasecurity
CVE-2017-6343Same vendor: Dahuasecurity
CVE-2024-39944Same vendor: Dahuasecurity
CVE-2024-39949Same vendor: Dahuasecurity

Affected Assets

dahuasecurity
dh-ipc-hdbw23a0rn-zs firmware
all versions
dahuasecurity
dh-ipc-hdbw13a0sn firmware
all versions
dahuasecurity
dh-ipc-hdw1xxx firmware
all versions
dahuasecurity
dh-ipc-hdw2xxx firmware
all versions
dahuasecurity
dh-ipc-hdw4xxx firmware
all versions
dahuasecurity
dh-ipc-hfw1xxx firmware
all versions
dahuasecurity
dh-ipc-hfw2xxx firmware
all versions
dahuasecurity
dh-ipc-hfw4xxx firmware
all versions
dahuasecurity
dh-sd6cxx firmware
all versions
dahuasecurity
dh-nvr1xxx firmware
all versions
+5 more product configuration(s) — see NVD for full list

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)
  • 2 hardening rules · 2 OS baselines
Validate
Prove the fix (OWASP ASVS)
  • V11.3.3

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-522

Training instructs users on protecting credentials from disclosure or unauthorized access.

addresses: CWE-522

Training records for security awareness and role-based training verify education on credential protection practices, tangibly reducing risks from mishandling or exposing credentials.

addresses: CWE-522

Protecting authenticator content from unauthorized disclosure and modification while requiring protective controls addresses insufficiently protected credentials.

addresses: CWE-522

Rules of behavior include credential protection and non-sharing requirements, reducing exposure of insufficiently protected credentials.

addresses: CWE-522

Terminating or revoking credentials stops use of insufficiently protected or lingering credentials post-termination.

addresses: CWE-522

Requiring confidentiality/integrity protection for stored credentials directly mitigates insufficiently protected credentials on disk or in configuration stores.

addresses: CWE-522

Credentials or keys delivered out-of-band are not exposed to interception or inadequate protection on the main transport.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.DS-01 full match
prevents

Encrypting data-at-rest fully prevents insecure credential storage while only partially satisfying the broader data-protection outcome.

PR.DS-02 full match
prevents

Encrypting data-in-transit fully prevents interception of credentials in motion while only partially satisfying the broader data-protection outcome.

PR.AA-01 mostly match
prevents

Credential management practices directly reduce insecure storage/transmission but do not guarantee encryption or transport protection.

PR.AA-04 mostly match
prevents

Protecting identity assertions covers conveyance of credentials but is narrower than full credential lifecycle protection.

PR.PS-01 mostly match
prevents

Secure configuration baselines explicitly disallow plaintext secrets in files.

PR.AA-03 partial match
prevents

Authentication policies can enforce stronger credential handling yet address only verification, not storage or transit protection.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

prevents

Requiring protected storage, transmission, and non-display of passwords prevents credentials from being stored or sent in clear text where they can be harvested by unauthorized actors.

prevents

Protecting secret and private keys against disclosure and unauthorized use decreases the exposure of credentials that are stored or transmitted in recoverable form.

prevents

Forbidding clear-text transmission and display of passwords, plus the use of stronger alternatives to passwords, prevents credentials from being obtained or reused by attackers.

prevents

Configuration management processes can enforce removal of secrets from config files, but the control is broader.

prevents

Acceptable-use expectations that cover protection of credentials and information assets throughout their lifecycle discourage practices that expose or mishandle authentication material.

prevents

Contractual clauses that survive termination help ensure that credentials and other secrets are not retained or misused after employment ends.

References