Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

dahuasecurity dvr5804 - vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2

CVE-2013-5754

The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote malicious users to obtain administrative access and change the administrator password via requests invo...
Dahuasecurity Dvr2104h -Dahuasecurity Dvr0404hd-a -Dahuasecurity Dvr1604hd-l -Dahuasecurity Dvr2104hc -Dahuasecurity Dvr5216a -Dahuasecurity Dvr5104he -Dahuasecurity Dvr3204lf-al -Dahuasecurity Dvr5204a -Dahuasecurity Dvr3204hf-s -Dahuasecurity Dvr0404hd-s -Dahuasecurity Dvr0804 -Dahuasecurity Dvr5104h -Dahuasecurity Dvr5804 -Dahuasecurity Dvr2116h -Dahuasecurity Dvr2404lf-al -Dahuasecurity Dvr2404hf-s -Dahuasecurity Dvr3232l -Dahuasecurity Dvr5116he -Dahuasecurity Dvr0804hf-u-e -Dahuasecurity Dvr0804hd-l -Dahuasecurity Dvr5116h -Dahuasecurity Dvr5108he -
10
CVSSv2

CVE-2013-3612

Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote malicious users to obtain administrative access via authorization requests involving (a) ActiveX, (b) a standalone client,...
Dahuasecurity Dvr2104h -Dahuasecurity Dvr0404hd-a -Dahuasecurity Dvr1604hd-l -Dahuasecurity Dvr2104hc -Dahuasecurity Dvr5216a -Dahuasecurity Dvr5104he -Dahuasecurity Dvr3204lf-al -Dahuasecurity Dvr5204a -Dahuasecurity Dvr3204hf-s -Dahuasecurity Dvr0404hd-s -Dahuasecurity Dvr0804 -Dahuasecurity Dvr5104h -Dahuasecurity Dvr5804 -Dahuasecurity Dvr2116h -Dahuasecurity Dvr2404lf-al -Dahuasecurity Dvr2404hf-s -Dahuasecurity Dvr3232l -Dahuasecurity Dvr5116he -Dahuasecurity Dvr0804hf-u-e -Dahuasecurity Dvr0804hd-l -Dahuasecurity Dvr5116h -Dahuasecurity Dvr5108he -
7.8
CVSSv2

CVE-2013-3613

Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote malicious users to obtain access via vectors involving a replay attack against the TELNET port.
Dahuasecurity Dvr2104h -Dahuasecurity Dvr0404hd-a -Dahuasecurity Dvr1604hd-l -Dahuasecurity Dvr2104hc -Dahuasecurity Dvr5216a -Dahuasecurity Dvr5104he -Dahuasecurity Dvr3204lf-al -Dahuasecurity Dvr5204a -Dahuasecurity Dvr3204hf-s -Dahuasecurity Dvr0404hd-s -Dahuasecurity Dvr0804 -Dahuasecurity Dvr5104h -Dahuasecurity Dvr5804 -Dahuasecurity Dvr2116h -Dahuasecurity Dvr2404lf-al -Dahuasecurity Dvr2404hf-s -Dahuasecurity Dvr3232l -Dahuasecurity Dvr5116he -Dahuasecurity Dvr0804hf-u-e -Dahuasecurity Dvr0804hd-l -Dahuasecurity Dvr5116h -Dahuasecurity Dvr5108he -
9.3
CVSSv2

CVE-2013-3614

Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote malicious users to obtain access via a brute-force attack.
Dahuasecurity Dvr2104h -Dahuasecurity Dvr0404hd-a -Dahuasecurity Dvr1604hd-l -Dahuasecurity Dvr2104hc -Dahuasecurity Dvr5216a -Dahuasecurity Dvr5104he -Dahuasecurity Dvr3204lf-al -Dahuasecurity Dvr5204a -Dahuasecurity Dvr3204hf-s -Dahuasecurity Dvr0404hd-s -Dahuasecurity Dvr0804 -Dahuasecurity Dvr5104h -Dahuasecurity Dvr5804 -Dahuasecurity Dvr2116h -Dahuasecurity Dvr2404lf-al -Dahuasecurity Dvr2404hf-s -Dahuasecurity Dvr3232l -Dahuasecurity Dvr5116he -Dahuasecurity Dvr0804hf-u-e -Dahuasecurity Dvr0804hd-l -Dahuasecurity Dvr5116h -Dahuasecurity Dvr5108he -
7.8
CVSSv2

CVE-2013-3615

Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent malicious users to discover cleartext passwords via a brute-force attack.
Dahuasecurity Dvr2104h -Dahuasecurity Dvr0404hd-a -Dahuasecurity Dvr1604hd-l -Dahuasecurity Dvr2104hc -Dahuasecurity Dvr5216a -Dahuasecurity Dvr5104he -Dahuasecurity Dvr3204lf-al -Dahuasecurity Dvr5204a -Dahuasecurity Dvr3204hf-s -Dahuasecurity Dvr0404hd-s -Dahuasecurity Dvr0804 -Dahuasecurity Dvr5104h -Dahuasecurity Dvr5804 -Dahuasecurity Dvr2116h -Dahuasecurity Dvr2404lf-al -Dahuasecurity Dvr2404hf-s -Dahuasecurity Dvr3232l -Dahuasecurity Dvr5116he -Dahuasecurity Dvr0804hf-u-e -Dahuasecurity Dvr0804hd-l -Dahuasecurity Dvr5116h -Dahuasecurity Dvr5108he -
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080log injectionCVE-2024-6041CVE-2024-37661XML external entityCVE-2024-0845privilege escalationCVE-2023-37057CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook