CVE-2013-3612

Published Sep 17, 2013 CVSS 2.0 · 10.0 Critical EPSS 10.3% KEV · Not listed
Description
Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving (a) ActiveX, (b) a standalone client, or (c) unknown other vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
References
History
Type Values Removed Values Added
Metrics epss

{'score': 0.10964}

epss

{'score': 0.14687}

Weaknesses

Sources

Status
PUBLISHED
Assigner
certcc
Published
Updated
Sep 16, 2024, 10:44 PM
Reserved
May 21, 2013, 12:00 AM
Status
Modified
Published
Sep 17, 2013, 12:04 PM
Modified
Jun 16, 2026, 11:55 PM