CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Vulnerability Details : CVE-2013-3614

Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a brute-force attack.
Publish Date : 2013-09-17 Last Update Date : 2013-09-25
Search Twitter   Search YouTube   Search Google

- CVSS Scores & Vulnerability Types

CVSS Score
9.3
Confidentiality Impact Complete (There is total information disclosure, resulting in all system files being revealed.)
Integrity Impact Complete (There is a total compromise of system integrity. There is a complete loss of system protection, resulting in the entire system being compromised.)
Availability Impact Complete (There is a total shutdown of the affected resource. The attacker can render the resource completely unavailable.)
Access Complexity Medium (The access conditions are somewhat specialized. Some preconditions must be satistified to exploit)
Authentication Not required (Authentication is not required to exploit the vulnerability.)
Gained Access None
Vulnerability Type(s)
CWE ID 264

- Products Affected By CVE-2013-3614

# Product Type Vendor Product Version Update Edition Language
1 Hardware Dahuasecurity Dvr0404hd-a - Version Details Vulnerabilities
2 Hardware Dahuasecurity Dvr0404hd-l - Version Details Vulnerabilities
3 Hardware Dahuasecurity Dvr0404hd-s - Version Details Vulnerabilities
4 Hardware Dahuasecurity Dvr0404hd-u - Version Details Vulnerabilities
5 Hardware Dahuasecurity Dvr0404hf-a-e - Version Details Vulnerabilities
6 Hardware Dahuasecurity Dvr0404hf-al-e - Version Details Vulnerabilities
7 Hardware Dahuasecurity Dvr0404hf-s-e - Version Details Vulnerabilities
8 Hardware Dahuasecurity Dvr0404hf-u-e - Version Details Vulnerabilities
9 Hardware Dahuasecurity Dvr0804 - Version Details Vulnerabilities
10 Hardware Dahuasecurity Dvr0804hd-l - Version Details Vulnerabilities
11 Hardware Dahuasecurity Dvr0804hd-s - Version Details Vulnerabilities
12 Hardware Dahuasecurity Dvr0804hf-a-e - Version Details Vulnerabilities
13 Hardware Dahuasecurity Dvr0804hf-al-e - Version Details Vulnerabilities
14 Hardware Dahuasecurity Dvr0804hf-l-e - Version Details Vulnerabilities
15 Hardware Dahuasecurity Dvr0804hf-s-e - Version Details Vulnerabilities
16 Hardware Dahuasecurity Dvr0804hf-u-e - Version Details Vulnerabilities
17 Hardware Dahuasecurity Dvr1604hd-l - Version Details Vulnerabilities
18 Hardware Dahuasecurity Dvr1604hd-s - Version Details Vulnerabilities
19 Hardware Dahuasecurity Dvr1604hf-a-e - Version Details Vulnerabilities
20 Hardware Dahuasecurity Dvr1604hf-al-e - Version Details Vulnerabilities
21 Hardware Dahuasecurity Dvr1604hf-l-e - Version Details Vulnerabilities
22 Hardware Dahuasecurity Dvr1604hf-s-e - Version Details Vulnerabilities
23 Hardware Dahuasecurity Dvr1604hf-u-e - Version Details Vulnerabilities
24 Hardware Dahuasecurity Dvr2104c - Version Details Vulnerabilities
25 Hardware Dahuasecurity Dvr2104h - Version Details Vulnerabilities
26 Hardware Dahuasecurity Dvr2104hc - Version Details Vulnerabilities
27 Hardware Dahuasecurity Dvr2104he - Version Details Vulnerabilities
28 Hardware Dahuasecurity Dvr2108c - Version Details Vulnerabilities
29 Hardware Dahuasecurity Dvr2108h - Version Details Vulnerabilities
30 Hardware Dahuasecurity Dvr2108hc - Version Details Vulnerabilities
31 Hardware Dahuasecurity Dvr2108he - Version Details Vulnerabilities
32 Hardware Dahuasecurity Dvr2116c - Version Details Vulnerabilities
33 Hardware Dahuasecurity Dvr2116h - Version Details Vulnerabilities
34 Hardware Dahuasecurity Dvr2116hc - Version Details Vulnerabilities
35 Hardware Dahuasecurity Dvr2116he - Version Details Vulnerabilities
36 Hardware Dahuasecurity Dvr2404hf-s - Version Details Vulnerabilities
37 Hardware Dahuasecurity Dvr2404lf-al - Version Details Vulnerabilities
38 Hardware Dahuasecurity Dvr2404lf-s - Version Details Vulnerabilities
39 Hardware Dahuasecurity Dvr3204hf-s - Version Details Vulnerabilities
40 Hardware Dahuasecurity Dvr3204lf-al - Version Details Vulnerabilities
41 Hardware Dahuasecurity Dvr3204lf-s - Version Details Vulnerabilities
42 Hardware Dahuasecurity Dvr3224l - Version Details Vulnerabilities
43 Hardware Dahuasecurity Dvr3232l - Version Details Vulnerabilities
44 Hardware Dahuasecurity Dvr5104c - Version Details Vulnerabilities
45 Hardware Dahuasecurity Dvr5104h - Version Details Vulnerabilities
46 Hardware Dahuasecurity Dvr5104he - Version Details Vulnerabilities
47 Hardware Dahuasecurity Dvr5108c - Version Details Vulnerabilities
48 Hardware Dahuasecurity Dvr5108h - Version Details Vulnerabilities
49 Hardware Dahuasecurity Dvr5108he - Version Details Vulnerabilities
50 Hardware Dahuasecurity Dvr5116c - Version Details Vulnerabilities
51 Hardware Dahuasecurity Dvr5116h - Version Details Vulnerabilities
52 Hardware Dahuasecurity Dvr5116he - Version Details Vulnerabilities
53 Hardware Dahuasecurity Dvr5204a - Version Details Vulnerabilities
54 Hardware Dahuasecurity Dvr5204l - Version Details Vulnerabilities
55 Hardware Dahuasecurity Dvr5208a - Version Details Vulnerabilities
56 Hardware Dahuasecurity Dvr5208l - Version Details Vulnerabilities
57 Hardware Dahuasecurity Dvr5216a - Version Details Vulnerabilities
58 Hardware Dahuasecurity Dvr5216l - Version Details Vulnerabilities
59 Hardware Dahuasecurity Dvr5404 - Version Details Vulnerabilities
60 Hardware Dahuasecurity Dvr5408 - Version Details Vulnerabilities
61 Hardware Dahuasecurity Dvr5416 - Version Details Vulnerabilities
62 Hardware Dahuasecurity Dvr5804 - Version Details Vulnerabilities
63 Hardware Dahuasecurity Dvr5808 - Version Details Vulnerabilities
64 Hardware Dahuasecurity Dvr5816 - Version Details Vulnerabilities
65 Hardware Dahuasecurity Dvr6404lf-s - Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor Product Vulnerable Versions
Dahuasecurity Dvr0404hd-a 1
Dahuasecurity Dvr0404hd-l 1
Dahuasecurity Dvr0404hd-s 1
Dahuasecurity Dvr0404hd-u 1
Dahuasecurity Dvr0404hf-a-e 1
Dahuasecurity Dvr0404hf-al-e 1
Dahuasecurity Dvr0404hf-s-e 1
Dahuasecurity Dvr0404hf-u-e 1
Dahuasecurity Dvr0804 1
Dahuasecurity Dvr0804hd-l 1
Dahuasecurity Dvr0804hd-s 1
Dahuasecurity Dvr0804hf-a-e 1
Dahuasecurity Dvr0804hf-al-e 1
Dahuasecurity Dvr0804hf-l-e 1
Dahuasecurity Dvr0804hf-s-e 1
Dahuasecurity Dvr0804hf-u-e 1
Dahuasecurity Dvr1604hd-l 1
Dahuasecurity Dvr1604hd-s 1
Dahuasecurity Dvr1604hf-a-e 1
Dahuasecurity Dvr1604hf-al-e 1
Dahuasecurity Dvr1604hf-l-e 1
Dahuasecurity Dvr1604hf-s-e 1
Dahuasecurity Dvr1604hf-u-e 1
Dahuasecurity Dvr2104c 1
Dahuasecurity Dvr2104h 1
Dahuasecurity Dvr2104hc 1
Dahuasecurity Dvr2104he 1
Dahuasecurity Dvr2108c 1
Dahuasecurity Dvr2108h 1
Dahuasecurity Dvr2108hc 1
Dahuasecurity Dvr2108he 1
Dahuasecurity Dvr2116c 1
Dahuasecurity Dvr2116h 1
Dahuasecurity Dvr2116hc 1
Dahuasecurity Dvr2116he 1
Dahuasecurity Dvr2404hf-s 1
Dahuasecurity Dvr2404lf-al 1
Dahuasecurity Dvr2404lf-s 1
Dahuasecurity Dvr3204hf-s 1
Dahuasecurity Dvr3204lf-al 1
Dahuasecurity Dvr3204lf-s 1
Dahuasecurity Dvr3224l 1
Dahuasecurity Dvr3232l 1
Dahuasecurity Dvr5104c 1
Dahuasecurity Dvr5104h 1
Dahuasecurity Dvr5104he 1
Dahuasecurity Dvr5108c 1
Dahuasecurity Dvr5108h 1
Dahuasecurity Dvr5108he 1
Dahuasecurity Dvr5116c 1
Dahuasecurity Dvr5116h 1
Dahuasecurity Dvr5116he 1
Dahuasecurity Dvr5204a 1
Dahuasecurity Dvr5204l 1
Dahuasecurity Dvr5208a 1
Dahuasecurity Dvr5208l 1
Dahuasecurity Dvr5216a 1
Dahuasecurity Dvr5216l 1
Dahuasecurity Dvr5404 1
Dahuasecurity Dvr5408 1
Dahuasecurity Dvr5416 1
Dahuasecurity Dvr5804 1
Dahuasecurity Dvr5808 1
Dahuasecurity Dvr5816 1
Dahuasecurity Dvr6404lf-s 1

- References For CVE-2013-3614

http://www.kb.cert.org/vuls/id/800094
CERT-VN VU#800094

- Metasploit Modules Related To CVE-2013-3614

There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)


CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.