VULNERABILITY INTELLIGENCE

CVE-2013-3612

CVSS score10 HIGH
EPSS probability10.30%
CISA KEVNot currently listed
Published2013-09-17
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving (a) ActiveX, (b) a standalone client, or (c) unknown other vectors.

Primary references