CVE-2013-3615

High

Description

Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.

SeverityHigh
CVSS7.8
Exploit probability—
ProductDahuasecurity Dvr0404hd-a
PublishedSep 17, 2013
First seenSep 17, 2013

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
dahuasecurity dvr0404hd-aNo range specified—
dahuasecurity dvr0404hd-lNo range specified—
dahuasecurity dvr0404hd-sNo range specified—
dahuasecurity dvr0404hd-uNo range specified—
dahuasecurity dvr0404hf-a-eNo range specified—
dahuasecurity dvr0404hf-al-eNo range specified—
dahuasecurity dvr0404hf-s-eNo range specified—
dahuasecurity dvr0404hf-u-eNo range specified—
dahuasecurity dvr0804No range specified—
dahuasecurity dvr0804hd-lNo range specified—
dahuasecurity dvr0804hd-sNo range specified—
dahuasecurity dvr0804hf-a-eNo range specified—
dahuasecurity dvr0804hf-al-eNo range specified—
dahuasecurity dvr0804hf-l-eNo range specified—
dahuasecurity dvr0804hf-s-eNo range specified—
dahuasecurity dvr0804hf-u-eNo range specified—
dahuasecurity dvr1604hd-lNo range specified—
dahuasecurity dvr1604hd-sNo range specified—
dahuasecurity dvr1604hf-a-eNo range specified—
dahuasecurity dvr1604hf-al-eNo range specified—
dahuasecurity dvr1604hf-l-eNo range specified—
dahuasecurity dvr1604hf-s-eNo range specified—
dahuasecurity dvr1604hf-u-eNo range specified—
dahuasecurity dvr2104cNo range specified—
dahuasecurity dvr2104hNo range specified—
dahuasecurity dvr2104hcNo range specified—
dahuasecurity dvr2104heNo range specified—
dahuasecurity dvr2108cNo range specified—
dahuasecurity dvr2108hNo range specified—
dahuasecurity dvr2108hcNo range specified—
dahuasecurity dvr2108heNo range specified—
dahuasecurity dvr2116cNo range specified—
dahuasecurity dvr2116hNo range specified—
dahuasecurity dvr2116hcNo range specified—
dahuasecurity dvr2116heNo range specified—
dahuasecurity dvr2404hf-sNo range specified—
dahuasecurity dvr2404lf-alNo range specified—
dahuasecurity dvr2404lf-sNo range specified—
dahuasecurity dvr3204hf-sNo range specified—
dahuasecurity dvr3204lf-alNo range specified—
dahuasecurity dvr3204lf-sNo range specified—
dahuasecurity dvr3224lNo range specified—
dahuasecurity dvr3232lNo range specified—
dahuasecurity dvr5104cNo range specified—
dahuasecurity dvr5104hNo range specified—
dahuasecurity dvr5104heNo range specified—
dahuasecurity dvr5108cNo range specified—
dahuasecurity dvr5108hNo range specified—
dahuasecurity dvr5108heNo range specified—
dahuasecurity dvr5116cNo range specified—
dahuasecurity dvr5116hNo range specified—
dahuasecurity dvr5116heNo range specified—
dahuasecurity dvr5204aNo range specified—
dahuasecurity dvr5204lNo range specified—
dahuasecurity dvr5208aNo range specified—
dahuasecurity dvr5208lNo range specified—
dahuasecurity dvr5216aNo range specified—
dahuasecurity dvr5216lNo range specified—
dahuasecurity dvr5404No range specified—
dahuasecurity dvr5408No range specified—
dahuasecurity dvr5416No range specified—
dahuasecurity dvr5804No range specified—
dahuasecurity dvr5808No range specified—
dahuasecurity dvr5816No range specified—
dahuasecurity dvr6404lf-sNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.