{"cve":"CVE-2013-3613","nvd":{"published":"2013-09-17T12:04:24.757","modified":"2026-06-16T23:55:30.817","status":"Modified","description":"Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port.","cvss_v4":null,"cvss_v3":null,"cwes":["CWE-287"],"references":["http://www.kb.cert.org/vuls/id/800094","http://www.kb.cert.org/vuls/id/800094"],"products":["dahuasecurity:dvr0404hd-a","dahuasecurity:dvr0404hd-l","dahuasecurity:dvr0404hd-s","dahuasecurity:dvr0404hd-u","dahuasecurity:dvr0404hf-a-e","dahuasecurity:dvr0404hf-al-e","dahuasecurity:dvr0404hf-s-e","dahuasecurity:dvr0404hf-u-e","dahuasecurity:dvr0804","dahuasecurity:dvr0804hd-l","dahuasecurity:dvr0804hd-s","dahuasecurity:dvr0804hf-a-e","dahuasecurity:dvr0804hf-al-e","dahuasecurity:dvr0804hf-l-e","dahuasecurity:dvr0804hf-s-e","dahuasecurity:dvr0804hf-u-e","dahuasecurity:dvr1604hd-l","dahuasecurity:dvr1604hd-s","dahuasecurity:dvr1604hf-a-e","dahuasecurity:dvr1604hf-al-e","dahuasecurity:dvr1604hf-l-e","dahuasecurity:dvr1604hf-s-e","dahuasecurity:dvr1604hf-u-e","dahuasecurity:dvr2104c","dahuasecurity:dvr2104h","dahuasecurity:dvr2104hc","dahuasecurity:dvr2104he","dahuasecurity:dvr2108c","dahuasecurity:dvr2108h","dahuasecurity:dvr2108hc","dahuasecurity:dvr2108he","dahuasecurity:dvr2116c","dahuasecurity:dvr2116h","dahuasecurity:dvr2116hc","dahuasecurity:dvr2116he","dahuasecurity:dvr2404hf-s","dahuasecurity:dvr2404lf-al","dahuasecurity:dvr2404lf-s","dahuasecurity:dvr3204hf-s","dahuasecurity:dvr3204lf-al","dahuasecurity:dvr3204lf-s","dahuasecurity:dvr3224l","dahuasecurity:dvr3232l","dahuasecurity:dvr5104c","dahuasecurity:dvr5104h","dahuasecurity:dvr5104he","dahuasecurity:dvr5108c","dahuasecurity:dvr5108h","dahuasecurity:dvr5108he","dahuasecurity:dvr5116c"],"source":"nvd","synced_at":"2026-10-19T20:29:16.037019470+00:00"},"epss":{"cve":"CVE-2013-3613","score":0.06661,"percentile":0.93888,"date":"2026-11-01"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}