CVE-2013-3613

Published Sep 17, 2013

Last updated a month ago

Overview

Description
Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port.
Source
cret@cert.org
NVD status
Deferred

Risk scores

CVSS 2.0

Type
Primary
Base score
7.8
Impact score
6.9
Exploitability score
10
Vector string
AV:N/AC:L/Au:N/C:C/I:N/A:N

Weaknesses

nvd@nist.gov
CWE-287

Social media

Hype score
Not currently trending

Configurations

References

Sources include official advisories and independent security research.