Authentication Bypass in Dahua DVR Products by Dahua Technology
CVE-2013-6117
Currently unrated
Key Information:
- Vendor
Dahuasecurity
- Status
- Vendor
- CVE Published:
- 11 July 2014
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 89%
What is CVE-2013-6117?
The Dahua DVR products version 2.608.0000.0 and 2.608.GV00.0 are susceptible to a critical authentication bypass vulnerability that allows malicious remote attackers to gain unauthorized access to sensitive information. By exploiting this flaw via TCP port 37777, attackers can retrieve user credentials, alter passwords, and erase log files, posing severe risks to users' privacy and system integrity.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.