Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving (a) ActiveX, (b) a standalone client, or (c) unknown other vectors.
References
| Link | Resource |
|---|---|
| http://www.kb.cert.org/vuls/id/800094 | US Government Resource |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2013-09-17 12:04
Updated : 2013-09-17 16:15
NVD link : CVE-2013-3612
Mitre link : CVE-2013-3612
CVE.ORG link : CVE-2013-3612
JSON object : View
Products Affected
dahuasecurity
- dvr2104c
- dvr2104he
- dvr5804
- dvr6404lf-s
- dvr0404hf-u-e
- dvr5104h
- dvr2116c
- dvr0404hd-l
- dvr0804hf-s-e
- dvr1604hd-l
- dvr3204lf-al
- dvr3224l
- dvr5116h
- dvr2104h
- dvr0404hd-u
- dvr0804hd-l
- dvr2108h
- dvr2116h
- dvr5108he
- dvr5208l
- dvr5416
- dvr1604hf-l-e
- dvr1604hf-al-e
- dvr5408
- dvr2116hc
- dvr1604hf-u-e
- dvr0404hf-s-e
- dvr5216a
- dvr0404hf-al-e
- dvr0404hd-s
- dvr0804
- dvr5104he
- dvr5108h
- dvr5108c
- dvr5808
- dvr5404
- dvr2404lf-al
- dvr3204hf-s
- dvr0404hf-a-e
- dvr2104hc
- dvr0804hd-s
- dvr5116c
- dvr1604hd-s
- dvr2108hc
- dvr3204lf-s
- dvr2116he
- dvr1604hf-s-e
- dvr3232l
- dvr0404hd-a
- dvr2404hf-s
- dvr5816
- dvr5204l
- dvr0804hf-al-e
- dvr0804hf-a-e
- dvr0804hf-u-e
- dvr2108he
- dvr2404lf-s
- dvr0804hf-l-e
- dvr5208a
- dvr1604hf-a-e
- dvr5116he
- dvr5216l
- dvr2108c
- dvr5104c
- dvr5204a
CWE
CWE-255
Credentials Management Errors