CVE-2013-5754
Critical
Description
The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote attackers to obtain administrative access and change the administrator password via requests involving (1) ActiveX, (2) a standalone client, or (3) unspecified other vectors, a different vulnerability than CVE-2013-3612.
SeverityCritical
CVSS10.0
Exploit probability—
ProductDahuasecurity Dvr0404hd-a
PublishedSep 17, 2013
First seenSep 17, 2013
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dahuasecurity dvr0404hd-a | No range specified | — |
| dahuasecurity dvr0404hd-l | No range specified | — |
| dahuasecurity dvr0404hd-s | No range specified | — |
| dahuasecurity dvr0404hd-u | No range specified | — |
| dahuasecurity dvr0404hf-a-e | No range specified | — |
| dahuasecurity dvr0404hf-al-e | No range specified | — |
| dahuasecurity dvr0404hf-s-e | No range specified | — |
| dahuasecurity dvr0404hf-u-e | No range specified | — |
| dahuasecurity dvr0804 | No range specified | — |
| dahuasecurity dvr0804hd-l | No range specified | — |
| dahuasecurity dvr0804hd-s | No range specified | — |
| dahuasecurity dvr0804hf-a-e | No range specified | — |
| dahuasecurity dvr0804hf-al-e | No range specified | — |
| dahuasecurity dvr0804hf-l-e | No range specified | — |
| dahuasecurity dvr0804hf-s-e | No range specified | — |
| dahuasecurity dvr0804hf-u-e | No range specified | — |
| dahuasecurity dvr1604hd-l | No range specified | — |
| dahuasecurity dvr1604hd-s | No range specified | — |
| dahuasecurity dvr1604hf-a-e | No range specified | — |
| dahuasecurity dvr1604hf-al-e | No range specified | — |
| dahuasecurity dvr1604hf-l-e | No range specified | — |
| dahuasecurity dvr1604hf-s-e | No range specified | — |
| dahuasecurity dvr1604hf-u-e | No range specified | — |
| dahuasecurity dvr2104c | No range specified | — |
| dahuasecurity dvr2104h | No range specified | — |
| dahuasecurity dvr2104hc | No range specified | — |
| dahuasecurity dvr2104he | No range specified | — |
| dahuasecurity dvr2108c | No range specified | — |
| dahuasecurity dvr2108h | No range specified | — |
| dahuasecurity dvr2108hc | No range specified | — |
| dahuasecurity dvr2108he | No range specified | — |
| dahuasecurity dvr2116c | No range specified | — |
| dahuasecurity dvr2116h | No range specified | — |
| dahuasecurity dvr2116hc | No range specified | — |
| dahuasecurity dvr2116he | No range specified | — |
| dahuasecurity dvr2404hf-s | No range specified | — |
| dahuasecurity dvr2404lf-al | No range specified | — |
| dahuasecurity dvr2404lf-s | No range specified | — |
| dahuasecurity dvr3204hf-s | No range specified | — |
| dahuasecurity dvr3204lf-al | No range specified | — |
| dahuasecurity dvr3204lf-s | No range specified | — |
| dahuasecurity dvr3224l | No range specified | — |
| dahuasecurity dvr3232l | No range specified | — |
| dahuasecurity dvr5104c | No range specified | — |
| dahuasecurity dvr5104h | No range specified | — |
| dahuasecurity dvr5104he | No range specified | — |
| dahuasecurity dvr5108c | No range specified | — |
| dahuasecurity dvr5108h | No range specified | — |
| dahuasecurity dvr5108he | No range specified | — |
| dahuasecurity dvr5116c | No range specified | — |
| dahuasecurity dvr5116h | No range specified | — |
| dahuasecurity dvr5116he | No range specified | — |
| dahuasecurity dvr5204a | No range specified | — |
| dahuasecurity dvr5204l | No range specified | — |
| dahuasecurity dvr5208a | No range specified | — |
| dahuasecurity dvr5208l | No range specified | — |
| dahuasecurity dvr5216a | No range specified | — |
| dahuasecurity dvr5216l | No range specified | — |
| dahuasecurity dvr5404 | No range specified | — |
| dahuasecurity dvr5408 | No range specified | — |
| dahuasecurity dvr5416 | No range specified | — |
| dahuasecurity dvr5804 | No range specified | — |
| dahuasecurity dvr5808 | No range specified | — |
| dahuasecurity dvr5816 | No range specified | — |
| dahuasecurity dvr6404lf-s | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.