high7.5Public exploit code
CVE-2013-6117
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change us…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Dahua DVR 2.608.0000.0/2.608.GV00.0 - Authentication Bypass (Metasploit)2013-11-18 · webapps · hardware
Impact
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dahuasecurity | Dvr Firmware | Versions 2.608.0000.0, 2.608.gv00.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://blog.depthsecurity.com/2013/11/dahua-dvr-authentication-bypass-cve.html
- http://packetstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.html
- http://seclists.org/bugtraq/2013/Nov/62
- http://www.exploit-db.com/exploits/29673
- http://www.osvdb.org/99783
- http://blog.depthsecurity.com/2013/11/dahua-dvr-authentication-bypass-cve.html
- http://packetstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.html
- http://seclists.org/bugtraq/2013/Nov/62
- http://www.exploit-db.com/exploits/29673
- http://www.osvdb.org/99783