Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving (a) ActiveX, (b) a standalone client, or (c) unknown other vectors.
References
| Link | Resource |
|---|---|
| http://www.kb.cert.org/vuls/id/800094 | US Government Resource |
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-09-17 12:04
Updated : 2013-09-17 16:15
NVD link : CVE-2013-3612
Mitre link : CVE-2013-3612
JSON object : View
Products Affected
dahuasecurity
- dvr5216a
- dvr0804hd-l
- dvr2108he
- dvr3224l
- dvr3204lf-al
- dvr2404lf-s
- dvr5116c
- dvr0404hf-al-e
- dvr5204a
- dvr2104h
- dvr0804hd-s
- dvr0404hf-a-e
- dvr6404lf-s
- dvr5108c
- dvr0804
- dvr1604hf-al-e
- dvr5408
- dvr3232l
- dvr1604hf-a-e
- dvr5808
- dvr1604hd-l
- dvr2104he
- dvr2116c
- dvr2404lf-al
- dvr5416
- dvr5816
- dvr0404hd-a
- dvr5104h
- dvr0404hf-s-e
- dvr1604hd-s
- dvr1604hf-l-e
- dvr1604hf-s-e
- dvr2108h
- dvr5208a
- dvr2404hf-s
- dvr0404hf-u-e
- dvr5108h
- dvr5208l
- dvr5104c
- dvr2116hc
- dvr3204hf-s
- dvr0804hf-al-e
- dvr5216l
- dvr0404hd-u
- dvr2104c
- dvr0804hf-a-e
- dvr5404
- dvr0404hd-s
- dvr2108c
- dvr2116he
- dvr2108hc
- dvr5116he
- dvr2116h
- dvr5204l
- dvr5116h
- dvr0804hf-s-e
- dvr3204lf-s
- dvr1604hf-u-e
- dvr5108he
- dvr0404hd-l
- dvr2104hc
- dvr0804hf-l-e
- dvr5104he
- dvr0804hf-u-e
- dvr5804
CWE
CWE-255
Credentials Management Errors
