$ cve CVE-2013-3615 JSON

CVE-2013-3615 EXPLOIT

7.8

HIGH · CVSS 2.0 · EPSS 7.7% (pctl 94)

Patch early

A public exploit exists.

Description

Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.

Scoring

CVSS	7.8 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:N/A:N
EPSS	7.66% — more likely to be exploited than 94% of all CVEs
Weakness	CWE-255
On CISA KEV	no
Public exploit	yes
Published	2013-09-17
Last modified	2026-06-16

Affected (40)

Vendor	Product
dahuasecurity	dvr0404hd-a
dahuasecurity	dvr0404hd-l
dahuasecurity	dvr0404hd-s
dahuasecurity	dvr0404hd-u
dahuasecurity	dvr0404hf-a-e
dahuasecurity	dvr0404hf-al-e
dahuasecurity	dvr0404hf-s-e
dahuasecurity	dvr0404hf-u-e
dahuasecurity	dvr0804
dahuasecurity	dvr0804hd-l
dahuasecurity	dvr0804hd-s
dahuasecurity	dvr0804hf-a-e
dahuasecurity	dvr0804hf-al-e
dahuasecurity	dvr0804hf-l-e
dahuasecurity	dvr0804hf-s-e
dahuasecurity	dvr0804hf-u-e
dahuasecurity	dvr1604hd-l
dahuasecurity	dvr1604hd-s
dahuasecurity	dvr1604hf-a-e
dahuasecurity	dvr1604hf-al-e
dahuasecurity	dvr1604hf-l-e
dahuasecurity	dvr1604hf-s-e
dahuasecurity	dvr1604hf-u-e
dahuasecurity	dvr2104c
dahuasecurity	dvr2104h
dahuasecurity	dvr2104hc
dahuasecurity	dvr2104he
dahuasecurity	dvr2108c
dahuasecurity	dvr2108h
dahuasecurity	dvr2108hc
dahuasecurity	dvr2108he
dahuasecurity	dvr2116c
dahuasecurity	dvr2116h
dahuasecurity	dvr2116hc
dahuasecurity	dvr2116he
dahuasecurity	dvr2404hf-s
dahuasecurity	dvr2404lf-al
dahuasecurity	dvr2404lf-s
dahuasecurity	dvr3204hf-s
dahuasecurity	dvr3204lf-al

Public exploits

Source	Title	Date
exploit-db	Dahua DVR 2.608.0000.0/2.608.GV00.0 - Authentication Bypass (Metasploit)	2013-11-18

References

→ the Explorer · watch your stack · NVD