CVE-2013-5754
The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote attackers to obtain administrative access and change the administrator password via requests involving (1) ActiveX, (2) a standalone client, or (3) unspecified other vectors, a different vulnerability than CVE-2013-3612.
- EPSS
- 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dahuasecurity:dvr0404hd-a
- dahuasecurity:dvr0404hd-l
- dahuasecurity:dvr0404hd-s
- dahuasecurity:dvr0404hd-u
- dahuasecurity:dvr0404hf-a-e
- dahuasecurity:dvr0404hf-al-e
- dahuasecurity:dvr0404hf-s-e
- dahuasecurity:dvr0404hf-u-e
- dahuasecurity:dvr0804
- dahuasecurity:dvr0804hd-l
- dahuasecurity:dvr0804hd-s
- dahuasecurity:dvr0804hf-a-e
- dahuasecurity:dvr0804hf-al-e
- dahuasecurity:dvr0804hf-l-e
- dahuasecurity:dvr0804hf-s-e
- dahuasecurity:dvr0804hf-u-e
- dahuasecurity:dvr1604hd-l
- dahuasecurity:dvr1604hd-s
- dahuasecurity:dvr1604hf-a-e
- dahuasecurity:dvr1604hf-al-e
- dahuasecurity:dvr1604hf-l-e
- dahuasecurity:dvr1604hf-s-e
- dahuasecurity:dvr1604hf-u-e
- dahuasecurity:dvr2104c
- dahuasecurity:dvr2104h
- dahuasecurity:dvr2104hc
- dahuasecurity:dvr2104he
- dahuasecurity:dvr2108c
- dahuasecurity:dvr2108h
- dahuasecurity:dvr2108hc
- dahuasecurity:dvr2108he
- dahuasecurity:dvr2116c
- dahuasecurity:dvr2116h
- dahuasecurity:dvr2116hc
- dahuasecurity:dvr2116he
- dahuasecurity:dvr2404hf-s
- dahuasecurity:dvr2404lf-al
- dahuasecurity:dvr2404lf-s
- dahuasecurity:dvr3204hf-s
- dahuasecurity:dvr3204lf-al
- dahuasecurity:dvr3204lf-s
- dahuasecurity:dvr3224l
- dahuasecurity:dvr3232l
- dahuasecurity:dvr5104c
- dahuasecurity:dvr5104h
- dahuasecurity:dvr5104he
- dahuasecurity:dvr5108c
- dahuasecurity:dvr5108h
- dahuasecurity:dvr5108he
- dahuasecurity:dvr5116c