Dahuasecurity Dvr0404hf-A-E
5 CVEs affecting Dahuasecurity Dvr0404hf-A-E. Latest disclosed: 2013-09-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2013-5754 | | 2013-09-17 | The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it… | |
CVE-2013-3615 | | 2013-09-17 | Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwo… | |
CVE-2013-3614 | | 2013-09-17 | Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a brute-force attack. | |
CVE-2013-3613 | | 2013-09-17 | Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack… | |
CVE-2013-3612 | | 2013-09-17 | Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers t… |