CVEvulnerability
CVE-2013-6117
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-07-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.
Affected configurations
• dahuasecurity dvr firmware 2.608.0000.0
• dahuasecurity dvr firmware 2.608.gv00.0
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://blog.depthsecurity.com/2013/11/dahua-dvr-authentication-bypass-cve.html blog.depthsecurity.com
- http://packetstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.html packetstormsecurity.com
- http://seclists.org/bugtraq/2013/Nov/62 seclists.org
- http://www.exploit-db.com/exploits/29673 www.exploit-db.com
- http://www.osvdb.org/99783 www.osvdb.org
- http://blog.depthsecurity.com/2013/11/dahua-dvr-authentication-bypass-cve.html blog.depthsecurity.com
- http://packetstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.html packetstormsecurity.com
- http://seclists.org/bugtraq/2013/Nov/62 seclists.org
- http://www.exploit-db.com/exploits/29673 www.exploit-db.com
- http://www.osvdb.org/99783 www.osvdb.org