CVE-2017-6432

CVE-2017-6432 describes a critical vulnerability in Dahua DHI-HCVR7216A-S3 devices and NVR firmware, stemming from the unencrypted Dahua DVR Protocol on TCP Port 37777. This allows a Man-in-the-Middle attacker to sniff and inject packets, leading to the creation of fully privileged user accounts and the capture of sensitive information. With a CVSS score of 8.1 (High), the vulnerability is network-exploitable with high impact on confidentiality, integrity, and availability, but requires high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.