CVE-2013-6117

Description

Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://blog.depthsecurity.com/2013/11/dahua-dvr-authentication-bypass-cve.html
• http://packetstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.html
• http://seclists.org/bugtraq/2013/Nov/62
• http://www.exploit-db.com/exploits/29673
• http://www.osvdb.org/99783
• http://blog.depthsecurity.com/2013/11/dahua-dvr-authentication-bypass-cve.html
• http://packetstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.html
• http://seclists.org/bugtraq/2013/Nov/62
• http://www.exploit-db.com/exploits/29673
• http://www.osvdb.org/99783

CWEs

CWE-287