First published: Tue Sep 17 2013(Updated: )
Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a brute-force attack.
Credit: cret@cert.org
Affected Software | Affected Version | How to fix |
---|---|---|
Dahua Security DVR0404HD-A | ||
Dahua Security DVR0404HD-L | ||
Dahua Technology DVR0404HD-S | ||
Dahua Security DVR0404HD-U | ||
Dahuasecurity DVR0404HF-A-E | ||
Dahua Security DVR0404HF-AL-E | ||
Dahua Technology DVR0404HF-S-E | ||
Dahua Technology DVR0404HF-U-E | ||
Dahuasecurity DVR Firmware | ||
Dahua Security DVR0804HD-L | ||
Dahua Security DVR0804HD-S | ||
Dahua Technology DVR0804HF-A-E | ||
Dahua Security DVR0804HF-AL-E | ||
Dahuasecurity Dvr0804hf-l-e | ||
Dahua Technology DVR0804HF-S-E | ||
Dahua DVR0804HF-U-E | ||
Dahua Security DVR1604HD-L | ||
Dahua Security DVR1604HD-S | ||
Dahua Security DVR1604HF-A-E | ||
Dahua Technology DVR1604HF-AL-E | ||
Dahua Technology DVR1604HF-L-E | ||
Dahua Technology DVR1604HF-S-E | ||
Dahua Security DVR1604HF-U-E | ||
Dahua Security DVR2104C | ||
Dahua DVR 2104H | ||
Dahuasecurity DVR2104HC | ||
Dahua Dvr2104HE | ||
Dahua Security DVR2108C | ||
Dahua Security DVR2108H | ||
Dahua DVR 2108HC | ||
Dahua DVR 2108HE | ||
Dahua Security DVR5116C | ||
Dahua DVR 2116HE | ||
Dahuasecurity DVR2116HC | ||
Dahua DVR 2116HE | ||
Dahua Security DVR2404HF-S | ||
Dahua Technology DVR2404LF-AL | ||
Dahuasecurity DVR2404LF-S | ||
Dahua Security DVR3204HF-S | ||
Dahua Security DVR3204LF-AL | ||
Dahua Security DVR3204LF-S | ||
Dahua Security DVR3224L | ||
Dahua Security DVR3232L | ||
Dahua DVR 5104C | ||
Dahuasecurity Dvr5104h | ||
Dahua DVR5104HE | ||
Dahua DVR 5108C | ||
Dahua Security DVR5108H | ||
Dahua Security DVR5108HE | ||
Dahua Security DVR5116C | ||
Dahua DVR 5116H | ||
Dahuasecurity DVR5116HE | ||
Dahua Security DVR5204A | ||
Dahua Security DVR5204L | ||
Dahua Security DVR5208A | ||
Dahua Security DVR5208L | ||
Dahua Security DVR5216A | ||
Dahua Technology DVR5216L | ||
Dahuasecurity DVR Firmware | ||
Dahua Security DVR5408 | ||
Dahua Technology DVR5416 | ||
Dahua Security DVR5804 | ||
Dahuasecurity DVR Firmware | ||
Dahua Security DVR5816 | ||
Dahuasecurity DVR6404LF-S |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2013-3614 is considered to be moderate due to its potential for brute-force attacks on weak passwords.
To fix CVE-2013-3614, increase the maximum password length and enforce stronger password policies.
CVE-2013-3614 affects multiple Dahua DVR models, including DVR0404HD-A, DVR0804HF, and DVR2108H among others.
Yes, CVE-2013-3614 can be exploited remotely, allowing attackers to gain unauthorized access via brute-force methods.
If you suspect your device is affected by CVE-2013-3614, immediately change passwords to stronger options and apply any available firmware updates.