Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving (a) ActiveX, (b) a standalone client, or (c) unknown other vectors.
References
| Link | Resource |
|---|---|
| http://www.kb.cert.org/vuls/id/800094 | US Government Resource |
| http://www.kb.cert.org/vuls/id/800094 | US Government Resource |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2013-09-17 12:04
Updated : 2025-04-11 00:51
NVD link : CVE-2013-3612
Mitre link : CVE-2013-3612
CVE.ORG link : CVE-2013-3612
JSON object : View
Products Affected
dahuasecurity
- dvr2116he
- dvr1604hf-u-e
- dvr5408
- dvr0404hf-a-e
- dvr3204lf-al
- dvr1604hf-s-e
- dvr1604hf-l-e
- dvr2116h
- dvr5104he
- dvr5116h
- dvr5204a
- dvr0404hf-s-e
- dvr0804hf-a-e
- dvr2104c
- dvr5204l
- dvr5208l
- dvr5108he
- dvr5804
- dvr5104h
- dvr5216l
- dvr2108c
- dvr2104hc
- dvr0404hf-al-e
- dvr0804hf-al-e
- dvr1604hf-al-e
- dvr2104he
- dvr5216a
- dvr0404hd-l
- dvr2108hc
- dvr0404hd-s
- dvr5108c
- dvr3232l
- dvr3204lf-s
- dvr0404hd-a
- dvr2404hf-s
- dvr0404hf-u-e
- dvr0804hf-s-e
- dvr5116he
- dvr3204hf-s
- dvr0804hd-l
- dvr0804hf-u-e
- dvr0404hd-u
- dvr1604hd-s
- dvr5116c
- dvr5416
- dvr6404lf-s
- dvr1604hd-l
- dvr0804hf-l-e
- dvr2116c
- dvr2404lf-s
- dvr1604hf-a-e
- dvr2104h
- dvr2108h
- dvr5104c
- dvr3224l
- dvr0804hd-s
- dvr5808
- dvr5816
- dvr2404lf-al
- dvr2108he
- dvr2116hc
- dvr5404
- dvr5208a
- dvr0804
- dvr5108h
CWE
CWE-255
Credentials Management Errors