Lucene search

CertccCVE-2013-3612

HistorySep 17, 2013 - 12:04 p.m.

CVE-2013-3612

2013-09-1712:04:24

CWE-255

certcc

web.nvd.nist.gov

dahua

dvr

appliances

hardcoded password

backdoor

remote access

vulnerability

cve-2013-3612

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

71.1%

JSON

Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified “backdoor” account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving (a) ActiveX, (b) a standalone client, or © unknown other vectors.

Affected configurations

Nvd

Node

dahuasecuritydvr0404hd-aMatch-

dahuasecuritydvr0404hd-lMatch-

dahuasecuritydvr0404hd-sMatch-

dahuasecuritydvr0404hd-uMatch-

dahuasecuritydvr0404hf-a-eMatch-

dahuasecuritydvr0404hf-al-eMatch-

dahuasecuritydvr0404hf-s-eMatch-

dahuasecuritydvr0404hf-u-eMatch-

dahuasecuritydvr0804Match-

dahuasecuritydvr0804hd-lMatch-

dahuasecuritydvr0804hd-sMatch-

dahuasecuritydvr0804hf-a-eMatch-

dahuasecuritydvr0804hf-al-eMatch-

dahuasecuritydvr0804hf-l-eMatch-

dahuasecuritydvr0804hf-s-eMatch-

dahuasecuritydvr0804hf-u-eMatch-

dahuasecuritydvr1604hd-lMatch-

dahuasecuritydvr1604hd-sMatch-

dahuasecuritydvr1604hf-a-eMatch-

dahuasecuritydvr1604hf-al-eMatch-

dahuasecuritydvr1604hf-l-eMatch-

dahuasecuritydvr1604hf-s-eMatch-

dahuasecuritydvr1604hf-u-eMatch-

dahuasecuritydvr2104cMatch-

dahuasecuritydvr2104hMatch-

dahuasecuritydvr2104hcMatch-

dahuasecuritydvr2104heMatch-

dahuasecuritydvr2108cMatch-

dahuasecuritydvr2108hMatch-

dahuasecuritydvr2108hcMatch-

dahuasecuritydvr2108heMatch-

dahuasecuritydvr2116cMatch-

dahuasecuritydvr2116hMatch-

dahuasecuritydvr2116hcMatch-

dahuasecuritydvr2116heMatch-

dahuasecuritydvr2404hf-sMatch-

dahuasecuritydvr2404lf-alMatch-

dahuasecuritydvr2404lf-sMatch-

dahuasecuritydvr3204hf-sMatch-

dahuasecuritydvr3204lf-alMatch-

dahuasecuritydvr3204lf-sMatch-

dahuasecuritydvr3224lMatch-

dahuasecuritydvr3232lMatch-

dahuasecuritydvr5104cMatch-

dahuasecuritydvr5104hMatch-

dahuasecuritydvr5104heMatch-

dahuasecuritydvr5108cMatch-

dahuasecuritydvr5108hMatch-

dahuasecuritydvr5108heMatch-

dahuasecuritydvr5116cMatch-

dahuasecuritydvr5116hMatch-

dahuasecuritydvr5116heMatch-

dahuasecuritydvr5204aMatch-

dahuasecuritydvr5204lMatch-

dahuasecuritydvr5208aMatch-

dahuasecuritydvr5208lMatch-

dahuasecuritydvr5216aMatch-

dahuasecuritydvr5216lMatch-

dahuasecuritydvr5404Match-

dahuasecuritydvr5408Match-

dahuasecuritydvr5416Match-

dahuasecuritydvr5804Match-

dahuasecuritydvr5808Match-

dahuasecuritydvr5816Match-

dahuasecuritydvr6404lf-sMatch-

VendorProductVersionCPE
dahuasecuritydvr0404hd-a-cpe:2.3:h:dahuasecurity:dvr0404hd-a:-:*:*:*:*:*:*:*
dahuasecuritydvr0404hd-l-cpe:2.3:h:dahuasecurity:dvr0404hd-l:-:*:*:*:*:*:*:*
dahuasecuritydvr0404hd-s-cpe:2.3:h:dahuasecurity:dvr0404hd-s:-:*:*:*:*:*:*:*
dahuasecuritydvr0404hd-u-cpe:2.3:h:dahuasecurity:dvr0404hd-u:-:*:*:*:*:*:*:*
dahuasecuritydvr0404hf-a-e-cpe:2.3:h:dahuasecurity:dvr0404hf-a-e:-:*:*:*:*:*:*:*
dahuasecuritydvr0404hf-al-e-cpe:2.3:h:dahuasecurity:dvr0404hf-al-e:-:*:*:*:*:*:*:*
dahuasecuritydvr0404hf-s-e-cpe:2.3:h:dahuasecurity:dvr0404hf-s-e:-:*:*:*:*:*:*:*
dahuasecuritydvr0404hf-u-e-cpe:2.3:h:dahuasecurity:dvr0404hf-u-e:-:*:*:*:*:*:*:*
dahuasecuritydvr0804-cpe:2.3:h:dahuasecurity:dvr0804:-:*:*:*:*:*:*:*
dahuasecuritydvr0804hd-l-cpe:2.3:h:dahuasecurity:dvr0804hd-l:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dahuasecurity	dvr0404hd-a	-	cpe:2.3:h:dahuasecurity:dvr0404hd-a:-:::::::*
dahuasecurity	dvr0404hd-l	-	cpe:2.3:h:dahuasecurity:dvr0404hd-l:-:::::::*
dahuasecurity	dvr0404hd-s	-	cpe:2.3:h:dahuasecurity:dvr0404hd-s:-:::::::*
dahuasecurity	dvr0404hd-u	-	cpe:2.3:h:dahuasecurity:dvr0404hd-u:-:::::::*
dahuasecurity	dvr0404hf-a-e	-	cpe:2.3:h:dahuasecurity:dvr0404hf-a-e:-:::::::*
dahuasecurity	dvr0404hf-al-e	-	cpe:2.3:h:dahuasecurity:dvr0404hf-al-e:-:::::::*
dahuasecurity	dvr0404hf-s-e	-	cpe:2.3:h:dahuasecurity:dvr0404hf-s-e:-:::::::*
dahuasecurity	dvr0404hf-u-e	-	cpe:2.3:h:dahuasecurity:dvr0404hf-u-e:-:::::::*
dahuasecurity	dvr0804	-	cpe:2.3:h:dahuasecurity:dvr0804:-:::::::*
dahuasecurity	dvr0804hd-l	-	cpe:2.3:h:dahuasecurity:dvr0804hd-l:-:::::::*