Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

dahuasecurity dvr2108he - vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2013-3612
Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote malicious users to obtain administrative access via authorization requests involving (a) ActiveX, (b) a standalone client,...
Dahuasecurity Dvr0404hd-s -Dahuasecurity Dvr0404hd-l -Dahuasecurity Dvr1604hd-l -Dahuasecurity Dvr3204hf-s -Dahuasecurity Dvr3204lf-al -Dahuasecurity Dvr1604hf-a-e -Dahuasecurity Dvr5408 -Dahuasecurity Dvr1604hf-al-e -Dahuasecurity Dvr5808 -Dahuasecurity Dvr5216a -Dahuasecurity Dvr5108h -Dahuasecurity Dvr2116h -Dahuasecurity Dvr5108he -Dahuasecurity Dvr2116he -Dahuasecurity Dvr2108hc -Dahuasecurity Dvr6404lf-s -Dahuasecurity Dvr2404hf-s -Dahuasecurity Dvr0404hf-u-e -Dahuasecurity Dvr0804hf-u-e -Dahuasecurity Dvr1604hf-l-e -Dahuasecurity Dvr0804hf-l-e -Dahuasecurity Dvr0404hf-a-e -
7.8
CVSSv2
CVE-2013-3613
Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote malicious users to obtain access via vectors involving a replay attack against the TELNET port.
Dahuasecurity Dvr6404lf-s -Dahuasecurity Dvr0404hf-u-e -Dahuasecurity Dvr1604hf-u-e -Dahuasecurity Dvr3232l -Dahuasecurity Dvr3204lf-s -Dahuasecurity Dvr0804hf-l-e -Dahuasecurity Dvr0804hf-a-e -Dahuasecurity Dvr0404hf-s-e -Dahuasecurity Dvr1604hf-s-e -Dahuasecurity Dvr0804hf-al-e -Dahuasecurity Dvr5204l -Dahuasecurity Dvr5216l -Dahuasecurity Dvr0404hd-a -Dahuasecurity Dvr2108h -Dahuasecurity Dvr5116c -Dahuasecurity Dvr2108he -Dahuasecurity Dvr2104c -Dahuasecurity Dvr2116c -Dahuasecurity Dvr0404hd-l -Dahuasecurity Dvr0804hd-l -Dahuasecurity Dvr1604hd-l -Dahuasecurity Dvr3224l -
9.3
CVSSv2
CVE-2013-3614
Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote malicious users to obtain access via a brute-force attack.
Dahuasecurity Dvr0804hd-l -Dahuasecurity Dvr1604hd-l -Dahuasecurity Dvr3224l -Dahuasecurity Dvr3232l -Dahuasecurity Dvr5408 -Dahuasecurity Dvr5416 -Dahuasecurity Dvr0404hf-s-e -Dahuasecurity Dvr0804hf-s-e -Dahuasecurity Dvr5104h -Dahuasecurity Dvr5108h -Dahuasecurity Dvr5116h -Dahuasecurity Dvr0404hd-a -Dahuasecurity Dvr2104hc -Dahuasecurity Dvr2108hc -Dahuasecurity Dvr2116hc -Dahuasecurity Dvr2104c -Dahuasecurity Dvr0404hd-s -Dahuasecurity Dvr0804 -Dahuasecurity Dvr6404lf-s -Dahuasecurity Dvr2404hf-s -Dahuasecurity Dvr3204hf-s -Dahuasecurity Dvr2404lf-al -
7.8
CVSSv2
CVE-2013-3615
Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent malicious users to discover cleartext passwords via a brute-force attack.
Dahuasecurity Dvr0404hf-u-e -Dahuasecurity Dvr1604hf-u-e -Dahuasecurity Dvr3204lf-s -Dahuasecurity Dvr1604hd-s -Dahuasecurity Dvr0804hf-l-e -Dahuasecurity Dvr0804hf-a-e -Dahuasecurity Dvr1604hf-s-e -Dahuasecurity Dvr0804hf-al-e -Dahuasecurity Dvr5216l -Dahuasecurity Dvr5208a -Dahuasecurity Dvr0404hd-a -Dahuasecurity Dvr2108h -Dahuasecurity Dvr5116c -Dahuasecurity Dvr2108he -Dahuasecurity Dvr2116c -Dahuasecurity Dvr0404hd-l -Dahuasecurity Dvr0804hd-l -Dahuasecurity Dvr1604hd-l -Dahuasecurity Dvr3224l -Dahuasecurity Dvr3232l -Dahuasecurity Dvr5404 -Dahuasecurity Dvr5408 -
10
CVSSv2
CVE-2013-5754
The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote malicious users to obtain administrative access and change the administrator password via requests invo...
Dahuasecurity Dvr0404hd-l -Dahuasecurity Dvr0804hd-l -Dahuasecurity Dvr1604hd-l -Dahuasecurity Dvr3224l -Dahuasecurity Dvr5404 -Dahuasecurity Dvr5408 -Dahuasecurity Dvr5416 -Dahuasecurity Dvr0404hf-s-e -Dahuasecurity Dvr5216a -Dahuasecurity Dvr5104h -Dahuasecurity Dvr5108h -Dahuasecurity Dvr5116h -Dahuasecurity Dvr2116he -Dahuasecurity Dvr2104hc -Dahuasecurity Dvr2108hc -Dahuasecurity Dvr2116hc -Dahuasecurity Dvr2104c -Dahuasecurity Dvr0404hd-u -Dahuasecurity Dvr0404hd-s -Dahuasecurity Dvr0804 -Dahuasecurity Dvr6404lf-s -Dahuasecurity Dvr3204hf-s -
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook