GCVE-110-CERTCC-2017-547255

Advisory PublishedCVSS 10.0/10

Vulnetix · Advisory published July 18, 2017

Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow.

Download JSON Open in Console

Risk Scores

CVSS 2.0

10.0/10

Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score7.8remediation_levelOFreport_confidenceCenvironmental_score5.86926702432target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2017-3223

References

Dahua IP cameras Sonia web interface is vulnerable to stack buffer overflow

url

Dahua IP cameras Sonia web interface is vulnerable to stack buffer overflow

url

Dahua IP cameras Sonia web interface is vulnerable to stack buffer overflow

advisory

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON