Back to Database
Status published
High
CVE-2013-3615
Dahua DVR appliances use a password-hash algorithm with a short...
Vulnerability Description
Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-3615
Credits & Attribution
No credits recorded in the NVD database.
References
More from dahuasecurity
View All →CVE-2017-7253
Dahua IP Camera devices 3.200.0001.6 can be exploited via these...
High
8.8
CVE-2017-6432
An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06...
High
8.1
CVE-2017-6343
The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware...
High
8.1
CVE-2017-6342
An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR...
Critical
9.8
CVE-2017-6341
Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware...
Medium
5.9
Affected Vendor
dahuasecurity
View all reports →Affected Software
dvr0404hd-a, dvr0404hd-l, dvr0404hd-s, dvr0404hd-u, dvr0404hf-a-e, dvr0404hf-al-e, dvr0404hf-s-e, dvr0404hf-u-e, dvr0804, dvr0804hd-l, dvr0804hd-s, dvr0804hf-a-e, dvr0804hf-al-e, dvr0804hf-l-e, dvr0804hf-s-e, dvr0804hf-u-e, dvr1604hd-l, dvr1604hd-s, dvr1604hf-a-e, dvr1604hf-al-e, dvr1604hf-l-e, dvr1604hf-s-e, dvr1604hf-u-e, dvr2104c, dvr2104h, dvr2104hc, dvr2104he, dvr2108c, dvr2108h, dvr2108hc, dvr2108he, dvr2116c, dvr2116h, dvr2116hc, dvr2116he, dvr2404hf-s, dvr2404lf-al, dvr2404lf-s, dvr3204hf-s, dvr3204lf-al, dvr3204lf-s, dvr3224l, dvr3232l, dvr5104c, dvr5104h, dvr5104he, dvr5108c, dvr5108h, dvr5108he, dvr5116c, dvr5116h, dvr5116he, dvr5204a, dvr5204l, dvr5208a, dvr5208l, dvr5216a, dvr5216l, dvr5404, dvr5408, dvr5416, dvr5804, dvr5808, dvr5816, dvr6404lf-s
Vulnerable Versions:
Unknown
Timeline
Official Publish:
September 17th, 2013
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.