CVE-2013-3612
HIGH 10.0EPSS 10.3%
Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving (a) ActiveX, (b) a standalone client, or (c) unknown other vectors.
- CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 10.30% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2013-09-17
- Updated
- 2024-09-16