CVE-2013-3612
high · 10Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving (a) ActiveX, (b) a standalone client, or (c) unknown other vectors.
10
CVSS
10.3%
EPSS (exploit prob.)
95th
EPSS percentile
2013-09-17
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-255
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| dahuasecurity | dvr0404hd-a | all versions |
| dahuasecurity | dvr0404hd-l | all versions |
| dahuasecurity | dvr0404hd-s | all versions |
| dahuasecurity | dvr0404hd-u | all versions |
| dahuasecurity | dvr0404hf-a-e | all versions |
| dahuasecurity | dvr0404hf-al-e | all versions |
| dahuasecurity | dvr0404hf-s-e | all versions |
| dahuasecurity | dvr0404hf-u-e | all versions |
| dahuasecurity | dvr0804 | all versions |
| dahuasecurity | dvr0804hd-l | all versions |
| dahuasecurity | dvr0804hd-s | all versions |
| dahuasecurity | dvr0804hf-a-e | all versions |
| dahuasecurity | dvr0804hf-al-e | all versions |
| dahuasecurity | dvr0804hf-l-e | all versions |
| dahuasecurity | dvr0804hf-s-e | all versions |
| dahuasecurity | dvr0804hf-u-e | all versions |
| dahuasecurity | dvr1604hd-l | all versions |
| dahuasecurity | dvr1604hd-s | all versions |
| dahuasecurity | dvr1604hf-a-e | all versions |
| dahuasecurity | dvr1604hf-al-e | all versions |
| dahuasecurity | dvr1604hf-l-e | all versions |
| dahuasecurity | dvr1604hf-s-e | all versions |
| dahuasecurity | dvr1604hf-u-e | all versions |
| dahuasecurity | dvr2104c | all versions |
| dahuasecurity | dvr2104h | all versions |
| dahuasecurity | dvr2104hc | all versions |
| dahuasecurity | dvr2104he | all versions |
| dahuasecurity | dvr2108c | all versions |
| dahuasecurity | dvr2108h | all versions |
| dahuasecurity | dvr2108hc | all versions |
| dahuasecurity | dvr2108he | all versions |
| dahuasecurity | dvr2116c | all versions |
| dahuasecurity | dvr2116h | all versions |
| dahuasecurity | dvr2116hc | all versions |
| dahuasecurity | dvr2116he | all versions |
| dahuasecurity | dvr2404hf-s | all versions |
| dahuasecurity | dvr2404lf-al | all versions |
| dahuasecurity | dvr2404lf-s | all versions |
| dahuasecurity | dvr3204hf-s | all versions |
| dahuasecurity | dvr3204lf-al | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2013-3612