Lucene search

CertccCVE-2013-3613

HistorySep 17, 2013 - 12:04 p.m.

CVE-2013-3613

2013-09-1712:04:24

CWE-287

certcc

web.nvd.nist.gov

dahua

dvr

upnp

vulnerability

remote access

replay attack

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.006

Percentile

79.1%

JSON

Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port.

Affected configurations

Nvd

Node

dahuasecuritydvr0404hd-aMatch-

dahuasecuritydvr0404hd-lMatch-

dahuasecuritydvr0404hd-sMatch-

dahuasecuritydvr0404hd-uMatch-

dahuasecuritydvr0404hf-a-eMatch-

dahuasecuritydvr0404hf-al-eMatch-

dahuasecuritydvr0404hf-s-eMatch-

dahuasecuritydvr0404hf-u-eMatch-

dahuasecuritydvr0804Match-

dahuasecuritydvr0804hd-lMatch-

dahuasecuritydvr0804hd-sMatch-

dahuasecuritydvr0804hf-a-eMatch-

dahuasecuritydvr0804hf-al-eMatch-

dahuasecuritydvr0804hf-l-eMatch-

dahuasecuritydvr0804hf-s-eMatch-

dahuasecuritydvr0804hf-u-eMatch-

dahuasecuritydvr1604hd-lMatch-

dahuasecuritydvr1604hd-sMatch-

dahuasecuritydvr1604hf-a-eMatch-

dahuasecuritydvr1604hf-al-eMatch-

dahuasecuritydvr1604hf-l-eMatch-

dahuasecuritydvr1604hf-s-eMatch-

dahuasecuritydvr1604hf-u-eMatch-

dahuasecuritydvr2104cMatch-

dahuasecuritydvr2104hMatch-

dahuasecuritydvr2104hcMatch-

dahuasecuritydvr2104heMatch-

dahuasecuritydvr2108cMatch-

dahuasecuritydvr2108hMatch-

dahuasecuritydvr2108hcMatch-

dahuasecuritydvr2108heMatch-

dahuasecuritydvr2116cMatch-

dahuasecuritydvr2116hMatch-

dahuasecuritydvr2116hcMatch-

dahuasecuritydvr2116heMatch-

dahuasecuritydvr2404hf-sMatch-

dahuasecuritydvr2404lf-alMatch-

dahuasecuritydvr2404lf-sMatch-

dahuasecuritydvr3204hf-sMatch-

dahuasecuritydvr3204lf-alMatch-

dahuasecuritydvr3204lf-sMatch-

dahuasecuritydvr3224lMatch-

dahuasecuritydvr3232lMatch-

dahuasecuritydvr5104cMatch-

dahuasecuritydvr5104hMatch-

dahuasecuritydvr5104heMatch-

dahuasecuritydvr5108cMatch-

dahuasecuritydvr5108hMatch-

dahuasecuritydvr5108heMatch-

dahuasecuritydvr5116cMatch-

dahuasecuritydvr5116hMatch-

dahuasecuritydvr5116heMatch-

dahuasecuritydvr5204aMatch-

dahuasecuritydvr5204lMatch-

dahuasecuritydvr5208aMatch-

dahuasecuritydvr5208lMatch-

dahuasecuritydvr5216aMatch-

dahuasecuritydvr5216lMatch-

dahuasecuritydvr5404Match-

dahuasecuritydvr5408Match-

dahuasecuritydvr5416Match-

dahuasecuritydvr5804Match-

dahuasecuritydvr5808Match-

dahuasecuritydvr5816Match-

dahuasecuritydvr6404lf-sMatch-

VendorProductVersionCPE
dahuasecuritydvr0404hd-a-cpe:2.3:h:dahuasecurity:dvr0404hd-a:-:*:*:*:*:*:*:*
dahuasecuritydvr0404hd-l-cpe:2.3:h:dahuasecurity:dvr0404hd-l:-:*:*:*:*:*:*:*
dahuasecuritydvr0404hd-s-cpe:2.3:h:dahuasecurity:dvr0404hd-s:-:*:*:*:*:*:*:*
dahuasecuritydvr0404hd-u-cpe:2.3:h:dahuasecurity:dvr0404hd-u:-:*:*:*:*:*:*:*
dahuasecuritydvr0404hf-a-e-cpe:2.3:h:dahuasecurity:dvr0404hf-a-e:-:*:*:*:*:*:*:*
dahuasecuritydvr0404hf-al-e-cpe:2.3:h:dahuasecurity:dvr0404hf-al-e:-:*:*:*:*:*:*:*
dahuasecuritydvr0404hf-s-e-cpe:2.3:h:dahuasecurity:dvr0404hf-s-e:-:*:*:*:*:*:*:*
dahuasecuritydvr0404hf-u-e-cpe:2.3:h:dahuasecurity:dvr0404hf-u-e:-:*:*:*:*:*:*:*
dahuasecuritydvr0804-cpe:2.3:h:dahuasecurity:dvr0804:-:*:*:*:*:*:*:*
dahuasecuritydvr0804hd-l-cpe:2.3:h:dahuasecurity:dvr0804hd-l:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dahuasecurity	dvr0404hd-a	-	cpe:2.3:h:dahuasecurity:dvr0404hd-a:-:::::::*
dahuasecurity	dvr0404hd-l	-	cpe:2.3:h:dahuasecurity:dvr0404hd-l:-:::::::*
dahuasecurity	dvr0404hd-s	-	cpe:2.3:h:dahuasecurity:dvr0404hd-s:-:::::::*
dahuasecurity	dvr0404hd-u	-	cpe:2.3:h:dahuasecurity:dvr0404hd-u:-:::::::*
dahuasecurity	dvr0404hf-a-e	-	cpe:2.3:h:dahuasecurity:dvr0404hf-a-e:-:::::::*
dahuasecurity	dvr0404hf-al-e	-	cpe:2.3:h:dahuasecurity:dvr0404hf-al-e:-:::::::*
dahuasecurity	dvr0404hf-s-e	-	cpe:2.3:h:dahuasecurity:dvr0404hf-s-e:-:::::::*
dahuasecurity	dvr0404hf-u-e	-	cpe:2.3:h:dahuasecurity:dvr0404hf-u-e:-:::::::*
dahuasecurity	dvr0804	-	cpe:2.3:h:dahuasecurity:dvr0804:-:::::::*
dahuasecurity	dvr0804hd-l	-	cpe:2.3:h:dahuasecurity:dvr0804hd-l:-:::::::*