Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV…
Priority HIGH 72CWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.
Summary
Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration.
Why it matters now
EPSS 0.76109 99th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 40
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huntcctv:dvr-04ch_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Huntcctv |
| cpe:2.3:h:huntcctv:dvr-04ch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huntcctv |
| cpe:2.3:o:huntcctv:dvr-04nc_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Huntcctv |
| cpe:2.3:h:huntcctv:dvr-04nc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huntcctv |
| cpe:2.3:o:huntcctv:dvr-08ch_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Huntcctv |
| cpe:2.3:h:huntcctv:dvr-08ch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huntcctv |
| cpe:2.3:o:huntcctv:dvr-08nc_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Huntcctv |
| cpe:2.3:h:huntcctv:dvr-08nc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huntcctv |
| cpe:2.3:o:huntcctv:dvr-16ch_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Huntcctv |
| cpe:2.3:h:huntcctv:dvr-16ch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huntcctv |
- cpe:2.3:o:huntcctv:dvr-04ch_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Huntcctv
- cpe:2.3:h:huntcctv:dvr-04ch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huntcctv
- cpe:2.3:o:huntcctv:dvr-04nc_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Huntcctv
- cpe:2.3:h:huntcctv:dvr-04nc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huntcctv
- cpe:2.3:o:huntcctv:dvr-08ch_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Huntcctv
- cpe:2.3:h:huntcctv:dvr-08ch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huntcctv
- cpe:2.3:o:huntcctv:dvr-08nc_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Huntcctv
- cpe:2.3:h:huntcctv:dvr-08nc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huntcctv
- cpe:2.3:o:huntcctv:dvr-16ch_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Huntcctv
- cpe:2.3:h:huntcctv:dvr-16ch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huntcctv
Show 30 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huntcctv:dr6-704a4h_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Huntcctv |
| cpe:2.3:h:huntcctv:dr6-704a4h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huntcctv |
| cpe:2.3:o:huntcctv:dr6-708a4h_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Huntcctv |
| cpe:2.3:h:huntcctv:dr6-708a4h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huntcctv |
| cpe:2.3:o:huntcctv:dr6-7316a4h_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Huntcctv |
| cpe:2.3:h:huntcctv:dr6-7316a4h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huntcctv |
| cpe:2.3:o:huntcctv:dr6-7316a4hl_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Huntcctv |
| cpe:2.3:h:huntcctv:dr6-7316a4hl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huntcctv |
| cpe:2.3:o:huntcctv:hdr-04kd_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Huntcctv |
| cpe:2.3:h:huntcctv:hdr-04kd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huntcctv |
| cpe:2.3:o:huntcctv:hdr-08kd_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Huntcctv |
| cpe:2.3:h:huntcctv:hdr-08kd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huntcctv |
| cpe:2.3:o:capturecctv:cdr_0410ve_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Capturecctv |
| cpe:2.3:h:capturecctv:cdr_0410ve:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Capturecctv |
| cpe:2.3:o:capturecctv:cdr_0820vde_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Capturecctv |
| cpe:2.3:h:capturecctv:cdr_0820vde:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Capturecctv |
| cpe:2.3:o:hachi:hv-04rd_pro_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | HACHI |
| cpe:2.3:h:hachi:hv-04rd_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | HACHI |
| cpe:2.3:o:hachi:hv-08rd_pro_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | HACHI |
| cpe:2.3:h:hachi:hv-08rd_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | HACHI |
| cpe:2.3:o:novuscctv:nv-dvr1204_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Novuscctv |
| cpe:2.3:h:novuscctv:nv-dvr1204:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Novuscctv |
| cpe:2.3:o:novuscctv:nv-dvr1208_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Novuscctv |
| cpe:2.3:h:novuscctv:nv-dvr1208:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Novuscctv |
| cpe:2.3:o:novuscctv:nv-dvr1216_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Novuscctv |
| cpe:2.3:h:novuscctv:nv-dvr1216:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Novuscctv |
| cpe:2.3:o:vsp:tw-dvr604_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Vsp |
| cpe:2.3:h:vsp:tw-dvr604:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Vsp |
| cpe:2.3:o:vsp:tw-dvr616_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Vsp |
| cpe:2.3:h:vsp:tw-dvr616:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Vsp |
- cpe:2.3:o:huntcctv:dr6-704a4h_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Huntcctv
- cpe:2.3:h:huntcctv:dr6-704a4h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huntcctv
- cpe:2.3:o:huntcctv:dr6-708a4h_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Huntcctv
- cpe:2.3:h:huntcctv:dr6-708a4h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huntcctv
- cpe:2.3:o:huntcctv:dr6-7316a4h_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Huntcctv
- cpe:2.3:h:huntcctv:dr6-7316a4h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huntcctv
- cpe:2.3:o:huntcctv:dr6-7316a4hl_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Huntcctv
- cpe:2.3:h:huntcctv:dr6-7316a4hl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huntcctv
- cpe:2.3:o:huntcctv:hdr-04kd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Huntcctv
- cpe:2.3:h:huntcctv:hdr-04kd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huntcctv
- cpe:2.3:o:huntcctv:hdr-08kd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Huntcctv
- cpe:2.3:h:huntcctv:hdr-08kd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huntcctv
- cpe:2.3:o:capturecctv:cdr_0410ve_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Capturecctv
- cpe:2.3:h:capturecctv:cdr_0410ve:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Capturecctv
- cpe:2.3:o:capturecctv:cdr_0820vde_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Capturecctv
- cpe:2.3:h:capturecctv:cdr_0820vde:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Capturecctv
- cpe:2.3:o:hachi:hv-04rd_pro_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·HACHI
- cpe:2.3:h:hachi:hv-04rd_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HACHI
- cpe:2.3:o:hachi:hv-08rd_pro_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·HACHI
- cpe:2.3:h:hachi:hv-08rd_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HACHI
- cpe:2.3:o:novuscctv:nv-dvr1204_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Novuscctv
- cpe:2.3:h:novuscctv:nv-dvr1204:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Novuscctv
- cpe:2.3:o:novuscctv:nv-dvr1208_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Novuscctv
- cpe:2.3:h:novuscctv:nv-dvr1208:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Novuscctv
- cpe:2.3:o:novuscctv:nv-dvr1216_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Novuscctv
- cpe:2.3:h:novuscctv:nv-dvr1216:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Novuscctv
- cpe:2.3:o:vsp:tw-dvr604_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Vsp
- cpe:2.3:h:vsp:tw-dvr604:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Vsp
- cpe:2.3:o:vsp:tw-dvr616_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Vsp
- cpe:2.3:h:vsp:tw-dvr616:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Vsp
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2013-1391
- 2026-10-03 Alias added: GHSA-pjmg-9mfx-vg44
References
Sources
- CVE-2013-1391 · CVE Program
- CVE-2013-1391 · NVD
- FIRST EPSS
- GHSA-pjmg-9mfx-vg44 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences