CVE-2017-6342

CVE-2017-6342 describes a critical vulnerability in Dahua DHI-HCVR7216A-S3 devices, NVR Firmware, Camera Firmware, and SmartPSS Software. The flaw allows the SmartPSS software to automatically log in as an administrator in the background upon launch, even from the login screen. This bypasses authentication and enables an attacker to sniff sensitive information without needing the administrator's password, directly facilitating the exploitation of CVE-2017-6341. Rated with a CVSS score of 9.8 (CRITICAL), this vulnerability has a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. The high severity is due to the complete bypass of authentication, granting full administrative access to an unauthenticated attacker. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a lack of widespread attention despite its critical severity.