CVE-2013-6117

Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

69.68% chance of exploitation in the next 30 days, 99th percentile

Published

2014-07-11

Updated

2024-08-06

Proof-of-concept exploits (2)

• http://www.exploit-db.com/exploits/29673
• milo2012/CVE-2013-61178★ · 2018-07-23

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/dahua_dvr_auth_byp…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/29673

References

• CVE Record
• NVD entry

Related

• CVE-2018-0296
• CVE-2018-13379
• CVE-2018-13382
• CVE-2020-14882
• CVE-2021-21972
• CVE-2024-36465