VULNERABILITY INTELLIGENCE

CVE-2013-3613

CVSS score7.8 HIGH
EPSS probability6.66%
CISA KEVNot currently listed
Published2013-09-17
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:N

Description

Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port.

Weakness classification

  • CWE-287: Improper Authentication

Primary references