7.8 - CVE-2013-3615

Executive Summary

Informations
Name	CVE-2013-3615	First vendor Publication	2013-09-17
Vendor	Cve	Last vendor Modification	2013-09-17

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:N/A:N)
Cvss Base Score	7.8	Attack Range	Network
Cvss Impact Score	6.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3615

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-255	Credentials Management

CPE : Common Platform Enumeration

Type	Description	Count
Hardware	Dahuasecurity dvr0404hd-A cpe:2.3:h:dahuasecurity:dvr0404hd-a:-:::::::*	1
Hardware	Dahuasecurity dvr0404hd-L cpe:2.3:h:dahuasecurity:dvr0404hd-l:-:::::::*	1
Hardware	Dahuasecurity dvr0404hd-S cpe:2.3:h:dahuasecurity:dvr0404hd-s:-:::::::*	1
Hardware	Dahuasecurity dvr0404hd-U cpe:2.3:h:dahuasecurity:dvr0404hd-u:-:::::::*	1
Hardware	Dahuasecurity dvr0404hf-A-E cpe:2.3:h:dahuasecurity:dvr0404hf-a-e:-:::::::*	1
Hardware	Dahuasecurity dvr0404hf-Al-E cpe:2.3:h:dahuasecurity:dvr0404hf-al-e:-:::::::*	1
Hardware	Dahuasecurity dvr0404hf-S-E cpe:2.3:h:dahuasecurity:dvr0404hf-s-e:-:::::::*	1
Hardware	Dahuasecurity dvr0404hf-U-E cpe:2.3:h:dahuasecurity:dvr0404hf-u-e:-:::::::*	1
Hardware	Dahuasecurity dvr0804 cpe:2.3:h:dahuasecurity:dvr0804:-:::::::*	1
Hardware	Dahuasecurity dvr0804hd-L cpe:2.3:h:dahuasecurity:dvr0804hd-l:-:::::::*	1
Hardware	Dahuasecurity dvr0804hd-S cpe:2.3:h:dahuasecurity:dvr0804hd-s:-:::::::*	1
Hardware	Dahuasecurity dvr0804hf-A-E cpe:2.3:h:dahuasecurity:dvr0804hf-a-e:-:::::::*	1
Hardware	Dahuasecurity dvr0804hf-Al-E cpe:2.3:h:dahuasecurity:dvr0804hf-al-e:-:::::::*	1
Hardware	Dahuasecurity dvr0804hf-L-E cpe:2.3:h:dahuasecurity:dvr0804hf-l-e:-:::::::*	1
Hardware	Dahuasecurity dvr0804hf-S-E cpe:2.3:h:dahuasecurity:dvr0804hf-s-e:-:::::::*	1
Hardware	Dahuasecurity dvr0804hf-U-E cpe:2.3:h:dahuasecurity:dvr0804hf-u-e:-:::::::*	1
Hardware	Dahuasecurity dvr1604hd-L cpe:2.3:h:dahuasecurity:dvr1604hd-l:-:::::::*	1
Hardware	Dahuasecurity dvr1604hd-S cpe:2.3:h:dahuasecurity:dvr1604hd-s:-:::::::*	1
Hardware	Dahuasecurity dvr1604hf-A-E cpe:2.3:h:dahuasecurity:dvr1604hf-a-e:-:::::::*	1
Hardware	Dahuasecurity dvr1604hf-Al-E cpe:2.3:h:dahuasecurity:dvr1604hf-al-e:-:::::::*	1
Hardware	Dahuasecurity dvr1604hf-L-E cpe:2.3:h:dahuasecurity:dvr1604hf-l-e:-:::::::*	1
Hardware	Dahuasecurity dvr1604hf-S-E cpe:2.3:h:dahuasecurity:dvr1604hf-s-e:-:::::::*	1
Hardware	Dahuasecurity dvr1604hf-U-E cpe:2.3:h:dahuasecurity:dvr1604hf-u-e:-:::::::*	1
Hardware	Dahuasecurity dvr2104c cpe:2.3:h:dahuasecurity:dvr2104c:-:::::::*	1
Hardware	Dahuasecurity dvr2104h cpe:2.3:h:dahuasecurity:dvr2104h:-:::::::*	1
Hardware	Dahuasecurity dvr2104hc cpe:2.3:h:dahuasecurity:dvr2104hc:-:::::::*	1
Hardware	Dahuasecurity dvr2104he cpe:2.3:h:dahuasecurity:dvr2104he:-:::::::*	1
Hardware	Dahuasecurity dvr2108c cpe:2.3:h:dahuasecurity:dvr2108c:-:::::::*	1
Hardware	Dahuasecurity dvr2108h cpe:2.3:h:dahuasecurity:dvr2108h:-:::::::*	1
Hardware	Dahuasecurity dvr2108hc cpe:2.3:h:dahuasecurity:dvr2108hc:-:::::::*	1
Hardware	Dahuasecurity dvr2108he cpe:2.3:h:dahuasecurity:dvr2108he:-:::::::*	1
Hardware	Dahuasecurity dvr2116c cpe:2.3:h:dahuasecurity:dvr2116c:-:::::::*	1
Hardware	Dahuasecurity dvr2116h cpe:2.3:h:dahuasecurity:dvr2116h:-:::::::*	1
Hardware	Dahuasecurity dvr2116hc cpe:2.3:h:dahuasecurity:dvr2116hc:-:::::::*	1
Hardware	Dahuasecurity dvr2116he cpe:2.3:h:dahuasecurity:dvr2116he:-:::::::*	1
Hardware	Dahuasecurity dvr2404hf-S cpe:2.3:h:dahuasecurity:dvr2404hf-s:-:::::::*	1
Hardware	Dahuasecurity dvr2404lf-Al cpe:2.3:h:dahuasecurity:dvr2404lf-al:-:::::::*	1
Hardware	Dahuasecurity dvr2404lf-S cpe:2.3:h:dahuasecurity:dvr2404lf-s:-:::::::*	1
Hardware	Dahuasecurity dvr3204hf-S cpe:2.3:h:dahuasecurity:dvr3204hf-s:-:::::::*	1
Hardware	Dahuasecurity dvr3204lf-Al cpe:2.3:h:dahuasecurity:dvr3204lf-al:-:::::::*	1
Hardware	Dahuasecurity dvr3204lf-S cpe:2.3:h:dahuasecurity:dvr3204lf-s:-:::::::*	1
Hardware	Dahuasecurity dvr3224l cpe:2.3:h:dahuasecurity:dvr3224l:-:::::::*	1
Hardware	Dahuasecurity dvr3232l cpe:2.3:h:dahuasecurity:dvr3232l:-:::::::*	1
Hardware	Dahuasecurity dvr5104c cpe:2.3:h:dahuasecurity:dvr5104c:-:::::::*	1
Hardware	Dahuasecurity dvr5104h cpe:2.3:h:dahuasecurity:dvr5104h:-:::::::*	1
Hardware	Dahuasecurity dvr5104he cpe:2.3:h:dahuasecurity:dvr5104he:-:::::::*	1
Hardware	Dahuasecurity dvr5108c cpe:2.3:h:dahuasecurity:dvr5108c:-:::::::*	1
Hardware	Dahuasecurity dvr5108h cpe:2.3:h:dahuasecurity:dvr5108h:-:::::::*	1
Hardware	Dahuasecurity dvr5108he cpe:2.3:h:dahuasecurity:dvr5108he:-:::::::*	1
Hardware	Dahuasecurity dvr5116c cpe:2.3:h:dahuasecurity:dvr5116c:-:::::::*	1
Hardware	Dahuasecurity dvr5116h cpe:2.3:h:dahuasecurity:dvr5116h:-:::::::*	1
Hardware	Dahuasecurity dvr5116he cpe:2.3:h:dahuasecurity:dvr5116he:-:::::::*	1
Hardware	Dahuasecurity dvr5204a cpe:2.3:h:dahuasecurity:dvr5204a:-:::::::*	1
Hardware	Dahuasecurity dvr5204l cpe:2.3:h:dahuasecurity:dvr5204l:-:::::::*	1
Hardware	Dahuasecurity dvr5208a cpe:2.3:h:dahuasecurity:dvr5208a:-:::::::*	1
Hardware	Dahuasecurity dvr5208l cpe:2.3:h:dahuasecurity:dvr5208l:-:::::::*	1
Hardware	Dahuasecurity dvr5216a cpe:2.3:h:dahuasecurity:dvr5216a:-:::::::*	1
Hardware	Dahuasecurity dvr5216l cpe:2.3:h:dahuasecurity:dvr5216l:-:::::::*	1
Hardware	Dahuasecurity dvr5404 cpe:2.3:h:dahuasecurity:dvr5404:-:::::::*	1
Hardware	Dahuasecurity dvr5408 cpe:2.3:h:dahuasecurity:dvr5408:-:::::::*	1
Hardware	Dahuasecurity dvr5416 cpe:2.3:h:dahuasecurity:dvr5416:-:::::::*	1
Hardware	Dahuasecurity dvr5804 cpe:2.3:h:dahuasecurity:dvr5804:-:::::::*	1
Hardware	Dahuasecurity dvr5808 cpe:2.3:h:dahuasecurity:dvr5808:-:::::::*	1
Hardware	Dahuasecurity dvr5816 cpe:2.3:h:dahuasecurity:dvr5816:-:::::::*	1
Hardware	Dahuasecurity dvr6404lf-S cpe:2.3:h:dahuasecurity:dvr6404lf-s:-:::::::*	1

ExploitDB Exploits

id	Description
2013-11-18	Dahua DVR 2.608.0000.0 and 2.608.GV00.0 - Authentication Bypass

Snort® IPS/IDS

Date	Description
2018-02-03	Dahua DVR clear logs request attempt RuleID : 45329 - Revision : 4 - Type : SERVER-WEBAPP
2018-02-03	Dahua DVR admin password reset attempt RuleID : 45328 - Revision : 3 - Type : SERVER-WEBAPP
2018-02-03	Dahua DVR NAS configuration download attempt RuleID : 45327 - Revision : 3 - Type : SERVER-WEBAPP
2018-02-03	Dahua DVR user group information query attempt RuleID : 45326 - Revision : 4 - Type : SERVER-WEBAPP
2018-02-03	Dahua DVR DDNS configuration download attempt RuleID : 45325 - Revision : 3 - Type : SERVER-WEBAPP
2018-02-03	Dahua DVR user password hash query attempt RuleID : 45324 - Revision : 4 - Type : SERVER-WEBAPP
2018-02-03	Dahua DVR email configuration download attempt RuleID : 45323 - Revision : 3 - Type : SERVER-WEBAPP
2018-02-03	Dahua DVR channel information query attempt RuleID : 45322 - Revision : 4 - Type : SERVER-WEBAPP
2018-02-03	Dahua DVR firmware version query attempt RuleID : 45321 - Revision : 4 - Type : SERVER-WEBAPP
2018-02-03	Dahua DVR serial number query attempt RuleID : 45320 - Revision : 5 - Type : SERVER-WEBAPP

Sources (Detail)

Source	Url
CERT-VN	http://www.kb.cert.org/vuls/id/800094

Alert History

If you want to see full details history, please login or register.

Date	Informations
2021-05-04 12:26:58	Multiple Updates
2021-04-22 01:32:39	Multiple Updates
2020-05-23 00:37:44	Multiple Updates
2013-11-24 21:19:41	Multiple Updates
2013-09-18 13:20:13	Multiple Updates
2013-09-17 17:20:25	First insertion

Global Informations

Type	Count
CWE ID(s)	1
CPE ID(s)	65
Sources(s)	1
ExploitDB Exploit(s)	1
Snort® Rule(s)	10

	Related
10	VU#800094
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 1 more Alert(s)

7.8 - CVE-2013-3615

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

CPE : Common Platform Enumeration

ExploitDB Exploits

Snort® IPS/IDS

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU