Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Dahua Security Digital Video Recorders Permissions, Privileges, and Access Controls (CVE-2013-3614)

🗓️ 12 Feb 2025 00:00:00Reported by TenableType 
nessus
 nessus🔗 www.tenable.com👁 13 Views

Dahua DVRs have weak password length, enabling remote brute-force access risk (CVE-2013-3614).

Related
Refs
Code
ReporterTitlePublishedViews
Family
0day.today		Dahua DVR 2.608.0000.0 and 2.608.GV00.0 - Authentication Bypass
19 Nov 201300:00
–zdt
CVE		CVE-2013-3614
17 Sep 201310:00
–cve
Cvelist		CVE-2013-3614
17 Sep 201310:00
–cvelist
Exploit DB		Dahua DVR 2.608.0000.0/2.608.GV00.0 - Authentication Bypass (Metasploit)
18 Nov 201300:00
–exploitdb
EUVD		EUVD-2013-3548
7 Oct 202500:30
–euvd
exploitpack		Dahua DVR 2.608.0000.02.608.GV00.0 - Authentication Bypass (Metasploit)
18 Nov 201300:00
–exploitpack
NVD		CVE-2013-3614
17 Sep 201312:04
–nvd
Prion		Default credentials
17 Sep 201312:04
–prion
RedhatCVE		CVE-2013-3614
22 May 202506:14
–redhatcve
securityvulns		Dahua DVR Authentication Bypass - CVE-2013-6117
18 Nov 201300:00
–securityvulns
Rows per page
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(502836);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/02/19");

  script_cve_id("CVE-2013-3614");

  script_name(english:"Dahua Security Digital Video Recorders Permissions, Privileges, and Access Controls (CVE-2013-3614)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Dahua DVR appliances have a small value for the maximum password
length, which makes it easier for remote attackers to obtain access
via a brute-force attack.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"http://www.kb.cert.org/vuls/id/800094");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2013-3614");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_cwe_id(264);

  script_set_attribute(attribute:"vuln_publication_date", value:"2013/09/17");
  script_set_attribute(attribute:"patch_publication_date", value:"2013/09/17");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/02/12");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0404hd-a:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0404hd-l:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0404hd-s:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0404hd-u:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0404hf-a-e:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0404hf-al-e:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0404hf-s-e:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0404hf-u-e:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0804:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0804hd-l:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0804hd-s:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0804hf-a-e:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0804hf-al-e:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0804hf-l-e:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0804hf-s-e:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr0804hf-u-e:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr1604hd-l:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr1604hd-s:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr1604hf-a-e:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr1604hf-al-e:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr1604hf-l-e:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr1604hf-s-e:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr1604hf-u-e:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2104c:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2104h:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2104hc:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2104he:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2108c:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2108h:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2108hc:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2108he:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2116c:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2116h:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2116hc:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2116he:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2404hf-s:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2404lf-al:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr2404lf-s:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr3204hf-s:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr3204lf-al:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr3204lf-s:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr3224l:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr3232l:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5104c:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5104h:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5104he:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5108c:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5108h:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5108he:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5116c:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5116h:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5116he:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5204a:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5204l:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5208a:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5208l:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5216a:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5216l:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5404:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5408:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5416:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5804:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5808:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr5816:-");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:dahuasecurity:dvr6404lf-s:-");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/DahuaSecurity");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/DahuaSecurity');

var asset = tenable_ot::assets::get(vendor:'DahuaSecurity');

var vuln_cpes = {
    "cpe:/h:dahuasecurity:dvr0404hd-a:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0404hd-l:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0404hd-s:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0404hd-u:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0404hf-a-e:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0404hf-al-e:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0404hf-s-e:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0404hf-u-e:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0804:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0804hd-l:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0804hd-s:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0804hf-a-e:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0804hf-al-e:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0804hf-l-e:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0804hf-s-e:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr0804hf-u-e:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr1604hd-l:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr1604hd-s:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr1604hf-a-e:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr1604hf-al-e:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr1604hf-l-e:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr1604hf-s-e:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr1604hf-u-e:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2104c:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2104h:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2104hc:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2104he:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2108c:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2108h:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2108hc:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2108he:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2116c:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2116h:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2116hc:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2116he:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2404hf-s:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2404lf-al:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr2404lf-s:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr3204hf-s:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr3204lf-al:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr3204lf-s:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr3224l:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr3232l:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5104c:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5104h:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5104he:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5108c:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5108h:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5108he:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5116c:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5116h:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5116he:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5204a:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5204l:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5208a:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5208l:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5216a:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5216l:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5404:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5408:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5416:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5804:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5808:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr5816:-" :
        {"family" : "DahuaSecurityVideoRecorders"},
    "cpe:/h:dahuasecurity:dvr6404lf-s:-" :
        {"family" : "DahuaSecurityVideoRecorders"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
19 Feb 2025 00:00Current
5.5Medium risk
Vulners AI Score5.5
CVSS 29.3
EPSS0.0704
dahua dvrpassword vulnerabilityremote accessbrute-force attacktenablecve-2013-3614
13