Vulnerabilities > CVE-2013-3615 - Credentials Management vulnerability in Dahuasecurity products

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
network
low complexity
dahuasecurity
CWE-255
exploit available
NVD
Published: 2013-09-17
Updated: 2013-09-17

Summary

Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.

Vulnerable Configurations

Part Description Count
Hardware
Dahuasecurity
65

Common Weakness Enumeration (CWE)

Exploit-Db

descriptionDahua DVR 2.608.0000.0 and 2.608.GV00.0 - Authentication Bypass. CVE-2013-3612,CVE-2013-3613,CVE-2013-3614,CVE-2013-3615,CVE-2013-6117. Webapps exploit for h...
fileexploits/hardware/webapps/29673.txt
idEDB-ID:29673
last seen2016-02-03
modified2013-11-18
platformhardware
port37777
published2013-11-18
reporterJake Reynolds
sourcehttps://www.exploit-db.com/download/29673/
titleDahua DVR 2.608.0000.0 and 2.608.GV00.0 - Authentication Bypass
typewebapps

Seebug

bulletinFamilyexploit
descriptionNo description provided by source.
idSSV:83161
last seen2017-11-19
modified2014-07-01
published2014-07-01
reporterRoot
sourcehttps://www.seebug.org/vuldb/ssvid-83161
titleDahua DVR 2.608.0000.0 and 2.608.GV00.0 - Authentication Bypass

References