CVE Feed

    Dashboard / CVE / CVE-2013-3613

    CVE-2013-3613

    Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port.

    Published:Sep 17, 2013
    Last Modified:Apr 11, 2025
    EPS:Sep 17, 2013
    EPSS Score:0.11439
    CVSS Score:7.8

    Affected Products

    Vendor
    Dahuasecurity
    Product
    Dvr0404hd-a
    Vendor
    Dahuasecurity
    Product
    Dvr0404hd-l
    Vendor
    Dahuasecurity
    Product
    Dvr0404hd-s
    Vendor
    Dahuasecurity
    Product
    Dvr0404hd-u
    Vendor
    Dahuasecurity
    Product
    Dvr0404hf-a-e
    Vendor
    Dahuasecurity
    Product
    Dvr0404hf-al-e
    Vendor
    Dahuasecurity
    Product
    Dvr0404hf-s-e
    Vendor
    Dahuasecurity
    Product
    Dvr0404hf-u-e
    Vendor
    Dahuasecurity
    Product
    Dvr0804
    Vendor
    Dahuasecurity
    Product
    Dvr0804hd-l
    Vendor
    Dahuasecurity
    Product
    Dvr0804hd-s
    Vendor
    Dahuasecurity
    Product
    Dvr0804hf-a-e
    Vendor
    Dahuasecurity
    Product
    Dvr0804hf-al-e
    Vendor
    Dahuasecurity
    Product
    Dvr0804hf-l-e
    Vendor
    Dahuasecurity
    Product
    Dvr0804hf-s-e
    Vendor
    Dahuasecurity
    Product
    Dvr0804hf-u-e
    Vendor
    Dahuasecurity
    Product
    Dvr1604hd-l
    Vendor
    Dahuasecurity
    Product
    Dvr1604hd-s
    Vendor
    Dahuasecurity
    Product
    Dvr1604hf-a-e
    Vendor
    Dahuasecurity
    Product
    Dvr1604hf-al-e
    Vendor
    Dahuasecurity
    Product
    Dvr1604hf-l-e
    Vendor
    Dahuasecurity
    Product
    Dvr1604hf-s-e
    Vendor
    Dahuasecurity
    Product
    Dvr1604hf-u-e
    Vendor
    Dahuasecurity
    Product
    Dvr2104c
    Vendor
    Dahuasecurity
    Product
    Dvr2104h
    Vendor
    Dahuasecurity
    Product
    Dvr2104hc
    Vendor
    Dahuasecurity
    Product
    Dvr2104he
    Vendor
    Dahuasecurity
    Product
    Dvr2108c
    Vendor
    Dahuasecurity
    Product
    Dvr2108h
    Vendor
    Dahuasecurity
    Product
    Dvr2108hc
    Vendor
    Dahuasecurity
    Product
    Dvr2108he
    Vendor
    Dahuasecurity
    Product
    Dvr2116c
    Vendor
    Dahuasecurity
    Product
    Dvr2116h
    Vendor
    Dahuasecurity
    Product
    Dvr2116hc
    Vendor
    Dahuasecurity
    Product
    Dvr2116he
    Vendor
    Dahuasecurity
    Product
    Dvr2404hf-s
    Vendor
    Dahuasecurity
    Product
    Dvr2404lf-al
    Vendor
    Dahuasecurity
    Product
    Dvr2404lf-s
    Vendor
    Dahuasecurity
    Product
    Dvr3204hf-s
    Vendor
    Dahuasecurity
    Product
    Dvr3204lf-al
    Vendor
    Dahuasecurity
    Product
    Dvr3204lf-s
    Vendor
    Dahuasecurity
    Product
    Dvr3224l
    Vendor
    Dahuasecurity
    Product
    Dvr3232l
    Vendor
    Dahuasecurity
    Product
    Dvr5104c
    Vendor
    Dahuasecurity
    Product
    Dvr5104h
    Vendor
    Dahuasecurity
    Product
    Dvr5104he
    Vendor
    Dahuasecurity
    Product
    Dvr5108c
    Vendor
    Dahuasecurity
    Product
    Dvr5108h
    Vendor
    Dahuasecurity
    Product
    Dvr5108he
    Vendor
    Dahuasecurity
    Product
    Dvr5116c
    Vendor
    Dahuasecurity
    Product
    Dvr5116h
    Vendor
    Dahuasecurity
    Product
    Dvr5116he
    Vendor
    Dahuasecurity
    Product
    Dvr5204a
    Vendor
    Dahuasecurity
    Product
    Dvr5204l
    Vendor
    Dahuasecurity
    Product
    Dvr5208a
    Vendor
    Dahuasecurity
    Product
    Dvr5208l
    Vendor
    Dahuasecurity
    Product
    Dvr5216a
    Vendor
    Dahuasecurity
    Product
    Dvr5216l
    Vendor
    Dahuasecurity
    Product
    Dvr5404
    Vendor
    Dahuasecurity
    Product
    Dvr5408
    Vendor
    Dahuasecurity
    Product
    Dvr5416
    Vendor
    Dahuasecurity
    Product
    Dvr5804
    Vendor
    Dahuasecurity
    Product
    Dvr5808
    Vendor
    Dahuasecurity
    Product
    Dvr5816
    Vendor
    Dahuasecurity
    Product
    Dvr6404lf-s

    Exploits

    https://www.exploit-db.com/exploits/29673

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High