CVE-2013-6117

Summary

Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://seclists.org/bugtraq/2013/Nov/62
• http://www.osvdb.org/99783
• http://packetstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.html
• http://www.exploit-db.com/exploits/29673
• http://blog.depthsecurity.com/2013/11/dahua-dvr-authentication-bypass-cve.html

References

• http://seclists.org/bugtraq/2013/Nov/62
• http://www.osvdb.org/99783
• http://packetstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.html
• http://www.exploit-db.com/exploits/29673
• http://blog.depthsecurity.com/2013/11/dahua-dvr-authentication-bypass-cve.html

• ←Previous
• Next→