bpmcdevitt/data_importer
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added dahua technolgies captured data potential from advisory example

Browse source
This commit is contained in:
Brendan McDevitt 2022-05-22 18:42:29 -05:00
parent 5639928760
commit 1221d76340
1 changed files with 39 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

39
doc/cna_readme_notes/cnas_with_html_advisories.md
View file

@ -584,6 +584,45 @@ https://www.dahuasecurity.com/support/cybersecurity/annoucementNotice
#### Notes #### Notes
Paginated index of vulns. Paginated index of vulns.
#### Captured Data Potential From Advisory #### Captured Data Potential From Advisory
```
{
:bulletin_id => 'DHCC-SA-201906-001',
:first_published => 'June 10, 2019',
:summary => 'Buffer overflow vulnerability found in some Dahua IP Camera devices. The vulnerability exits in the function of redirection display for serial port printing information, which can not be used by product basic functions. After an attacker logs in locally, this vulnerability can be exploited to cause device restart or arbitrary code execution. Dahua has identified the corresponding security problems in the static code auditing process, so it has gradually deleted this function, which is no longer available in the newer devices and softwares. Dahua has released versions of the affected products to fix the vulnerability.',
:cve_id => 'CVE-2019-9676',
:vulnerability_score => '7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)',
:affected_products_and_fix_software => [
{
:affected_model => 'IPC-HFW1XXX',
:firmware_version => 'Build before 2018/11',
:fix_software => [
'DH_IPC-HX1XXX-Eris_EngSpnPrt_P_V2.622.0000000.8.R.190420',
'DH_IPC-HX1XXX-Eris_EngSpnPrt_N_V2.622.0000000.8.R.190420',
'DH_IPC-HX2XXX-Eris_Chn_PN_V2.622.0000000.8.R.190420'
]
},
{
:affected_model => 'IPC-HDW1XXX',
:firmware_version => 'Build before 2018/11',
:fix_software => [
'DH_IPC-HX1XXX-Eris_EngSpnPrt_P_V2.622.0000000.8.R.190420',
'DH_IPC-HX1XXX-Eris_EngSpnPrt_N_V2.622.0000000.8.R.190420',
'DH_IPC-HX2XXX-Eris_Chn_PN_V2.622.0000000.8.R.190420'
]
},
{
:affected_model => 'IPC-HFW2XXX',
:firmware_version => 'Build before 2018/11',
:fix_software => [
'DH_IPC-HX1XXX-Eris_EngSpnPrt_P_V2.622.0000000.8.R.190420',
'DH_IPC-HX1XXX-Eris_EngSpnPrt_N_V2.622.0000000.8.R.190420',
'DH_IPC-HX2XXX-Eris_Chn_PN_V2.622.0000000.8.R.190420'
]
}
],
:fix_software_download => 'Please download the corresponding fix software (or its newer version) as listed in the above table from Dahua website. Customers can also contact Dahua local technical support to obtain the fix software.'
}
```
## Debian Gnu/Linux ## Debian Gnu/Linux
### Advisory ### Advisory