CVE-2013-6117

Description

Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.

References

https://github.com/fsn4k3/dahua-dvr-metasploit

https://github.com/mrhenrike/EmbedXPL-Forge

https://github.com/milo2012/CVE-2013-6117

https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-5946

http://www.osvdb.org/99783

http://www.exploit-db.com/exploits/29673

http://seclists.org/bugtraq/2013/Nov/62

http://packetstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.html

http://blog.depthsecurity.com/2013/11/dahua-dvr-authentication-bypass-cve.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS