VDB
CVE-2013-3612
CVE-2013-3612
PUBLISHED
CVSS 10 CRITICAL
Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving (a) ActiveX, (b) a standalone client, or (c) unknown other vectors.
EPSS 12.09% · 93.9th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
12.09%
93.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| dahuasecurity | dvr0404hd-l | |
| dahuasecurity | dvr6404lf-s | |
| dahuasecurity | dvr5104c | |
| dahuasecurity | dvr0804hf-s-e | |
| dahuasecurity | dvr5404 | |
| dahuasecurity | dvr2108he | |
| dahuasecurity | dvr2116h | |
| dahuasecurity | dvr2104h | |
| dahuasecurity | dvr5208l | |
| dahuasecurity | dvr5808 | |
| dahuasecurity | dvr5816 | |
| dahuasecurity | dvr5104he | |
| dahuasecurity | dvr5216a | |
| dahuasecurity | dvr0404hd-a | |
| dahuasecurity | dvr1604hf-u-e | |
| dahuasecurity | dvr1604hd-l | |
| dahuasecurity | dvr5116h | |
| dahuasecurity | dvr0804hf-al-e | |
| dahuasecurity | dvr0404hf-u-e | |
| dahuasecurity | dvr5108h |
…and 46 more
Timeline
- Sep 17, 2013 CVE Published
- Nov 19, 2013 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 16, 2023 EPSS Score
References
- VU#800094 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2013-3612 advisory