Unscored severity · published Jul 11, 2014
CVE-2013-6117
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear…
–
CVSS
69.7%
EPSS
No
On KEV
Description
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.
Exploitation
Is it being used?
Exploit prediction (EPSS)69.7% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
Dvr Firmware · Dahuasecurity
2.608.0000.0; 2.608.gv00.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-6117
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-6117
blog.depthsecurity.com
http://blog.depthsecurity.com/2013/11/dahua-dvr-authentication-bypass-cve.html
packetstormsecurity.com
http://packetstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.html
seclists.org
http://seclists.org/bugtraq/2013/Nov/62
www.exploit-db.com
http://www.exploit-db.com/exploits/29673
www.osvdb.org
http://www.osvdb.org/99783