CVE-2013-3615: High severity dahua security dvr0404hd-a vulnerability
Published Sep 17, 2013
·Updated
Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.
Affected Software
65 affected components
Dahuasecurity Dvr0404hd-a
Dahuasecurity Dvr0404hd-l
Dahuasecurity Dvr0404hd-s
Dahuasecurity Dvr0404hd-u
Dahuasecurity Dvr0404hf-a-e
Dahuasecurity Dvr0404hf-al-e
Dahuasecurity Dvr0404hf-s-e
Dahuasecurity Dvr0404hf-u-e
Dahuasecurity Dvr0804
Dahuasecurity Dvr0804hd-l
Dahuasecurity Dvr0804hd-s
Dahuasecurity Dvr0804hf-a-e
Dahuasecurity Dvr0804hf-al-e
Dahuasecurity Dvr0804hf-l-e
Dahuasecurity Dvr0804hf-s-e
Dahuasecurity Dvr0804hf-u-e
Dahuasecurity Dvr1604hd-l
Dahuasecurity Dvr1604hd-s
Dahuasecurity Dvr1604hf-a-e
Dahuasecurity Dvr1604hf-al-e
Dahuasecurity Dvr1604hf-l-e
Dahuasecurity Dvr1604hf-s-e
Dahuasecurity Dvr1604hf-u-e
Dahuasecurity Dvr2104c
Dahuasecurity Dvr2104h
Dahuasecurity Dvr2104hc
Dahuasecurity Dvr2104he
Dahuasecurity Dvr2108c
Dahuasecurity Dvr2108h
Dahuasecurity Dvr2108hc
Dahuasecurity Dvr2108he
Dahuasecurity Dvr2116c
Dahuasecurity Dvr2116h
Dahuasecurity Dvr2116hc
Dahuasecurity Dvr2116he
Dahuasecurity Dvr2404hf-s
Dahuasecurity Dvr2404lf-al
Dahuasecurity Dvr2404lf-s
Dahuasecurity Dvr3204hf-s
Dahuasecurity Dvr3204lf-al
Dahuasecurity Dvr3204lf-s
Dahuasecurity Dvr3224l
Dahuasecurity Dvr3232l
Dahuasecurity Dvr5104c
Dahuasecurity Dvr5104h
Dahuasecurity Dvr5104he
Dahuasecurity Dvr5108c
Dahuasecurity Dvr5108h
Dahuasecurity Dvr5108he
Dahuasecurity Dvr5116c
Dahuasecurity Dvr5116h
Dahuasecurity Dvr5116he
Dahuasecurity Dvr5204a
Dahuasecurity Dvr5204l
Dahuasecurity Dvr5208a
Dahuasecurity Dvr5208l
Dahuasecurity Dvr5216a
Dahuasecurity Dvr5216l
Dahuasecurity Dvr5404
Dahuasecurity Dvr5408
Dahuasecurity Dvr5416
Dahuasecurity Dvr5804
Dahuasecurity Dvr5808
Dahuasecurity Dvr5816
Dahuasecurity Dvr6404lf-s
Event History
Sep 17, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3615?
CVE-2013-3615 has a medium severity rating due to its potential to allow brute-force attacks against passwords.
2
How do I fix CVE-2013-3615?
To fix CVE-2013-3615, update the firmware of your Dahua DVR appliances to a version that improves password hashing algorithms.
3
Which products are affected by CVE-2013-3615?
CVE-2013-3615 affects several Dahua DVR models including DVR0404HD-A, DVR0804HD-S, and DVR1604HF-S.
4
What type of attack does CVE-2013-3615 facilitate?
CVE-2013-3615 facilitates brute-force attacks, making it easier for attackers to discover cleartext passwords.
5
Is CVE-2013-3615 exploitable remotely?
Yes, attackers can exploit CVE-2013-3615 remotely if they can reach the affected Dahua DVR appliances.