Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-3613
dahua
dvr
upnp
vulnerability
remote access
replay attack
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.5%
Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port.
Affected configurations
Node
dahuasecuritydvr0404hd-aMatch-
ORdahuasecuritydvr0404hd-lMatch-
ORdahuasecuritydvr0404hd-sMatch-
ORdahuasecuritydvr0404hd-uMatch-
ORdahuasecuritydvr0404hf-a-eMatch-
ORdahuasecuritydvr0404hf-al-eMatch-
ORdahuasecuritydvr0404hf-s-eMatch-
ORdahuasecuritydvr0404hf-u-eMatch-
ORdahuasecuritydvr0804Match-
ORdahuasecuritydvr0804hd-lMatch-
ORdahuasecuritydvr0804hd-sMatch-
ORdahuasecuritydvr0804hf-a-eMatch-
ORdahuasecuritydvr0804hf-al-eMatch-
ORdahuasecuritydvr0804hf-l-eMatch-
ORdahuasecuritydvr0804hf-s-eMatch-
ORdahuasecuritydvr0804hf-u-eMatch-
ORdahuasecuritydvr1604hd-lMatch-
ORdahuasecuritydvr1604hd-sMatch-
ORdahuasecuritydvr1604hf-a-eMatch-
ORdahuasecuritydvr1604hf-al-eMatch-
ORdahuasecuritydvr1604hf-l-eMatch-
ORdahuasecuritydvr1604hf-s-eMatch-
ORdahuasecuritydvr1604hf-u-eMatch-
ORdahuasecuritydvr2104cMatch-
ORdahuasecuritydvr2104hMatch-
ORdahuasecuritydvr2104hcMatch-
ORdahuasecuritydvr2104heMatch-
ORdahuasecuritydvr2108cMatch-
ORdahuasecuritydvr2108hMatch-
ORdahuasecuritydvr2108hcMatch-
ORdahuasecuritydvr2108heMatch-
ORdahuasecuritydvr2116cMatch-
ORdahuasecuritydvr2116hMatch-
ORdahuasecuritydvr2116hcMatch-
ORdahuasecuritydvr2116heMatch-
ORdahuasecuritydvr2404hf-sMatch-
ORdahuasecuritydvr2404lf-alMatch-
ORdahuasecuritydvr2404lf-sMatch-
ORdahuasecuritydvr3204hf-sMatch-
ORdahuasecuritydvr3204lf-alMatch-
ORdahuasecuritydvr3204lf-sMatch-
ORdahuasecuritydvr3224lMatch-
ORdahuasecuritydvr3232lMatch-
ORdahuasecuritydvr5104cMatch-
ORdahuasecuritydvr5104hMatch-
ORdahuasecuritydvr5104heMatch-
ORdahuasecuritydvr5108cMatch-
ORdahuasecuritydvr5108hMatch-
ORdahuasecuritydvr5108heMatch-
ORdahuasecuritydvr5116cMatch-
ORdahuasecuritydvr5116hMatch-
ORdahuasecuritydvr5116heMatch-
ORdahuasecuritydvr5204aMatch-
ORdahuasecuritydvr5204lMatch-
ORdahuasecuritydvr5208aMatch-
ORdahuasecuritydvr5208lMatch-
ORdahuasecuritydvr5216aMatch-
ORdahuasecuritydvr5216lMatch-
ORdahuasecuritydvr5404Match-
ORdahuasecuritydvr5408Match-
ORdahuasecuritydvr5416Match-
ORdahuasecuritydvr5804Match-
ORdahuasecuritydvr5808Match-
ORdahuasecuritydvr5816Match-
ORdahuasecuritydvr6404lf-sMatch-
References
Related
nvd
nvd
CVE-2013-3613
2013-09-17 12:04:24
prion
prion
Design/Logic Flaw
2013-09-17 12:04:00
cvelist
cvelist
CVE-2013-3613
2022-10-03 16:14:45
cert
cert
Dahua Security DVRs contain multiple vulnerabilities
2013-09-13 00:00:00
securityvulns
securityvulns
Dahua DVR Authentication Bypass - CVE-2013-6117
2013-11-18 00:00:00
Dahua DVR authentication bypass
2013-11-18 00:00:00
exploitpack
exploitpack
Dahua DVR 2.608.0000.02.608.GV00.0 - Authentication Bypass (Metasploit)
2013-11-18 00:00:00
seebug
seebug
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 - Authentication Bypass
2014-07-01 00:00:00
exploitdb
exploitdb
Dahua DVR 2.608.0000.0/2.608.GV00.0 - Authentication Bypass (Metasploit)
2013-11-18 00:00:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.5%
Related for CVE-2013-3613