Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for…
Priority MEDIUM 44CWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Complete · None · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-287.
Summary
Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port.
Why it matters now
EPSS 0.06661 93rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 65
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:dahuasecurity:dvr0404hd-a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr0404hd-l:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr0404hd-s:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr0404hd-u:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr0404hf-a-e:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr0404hf-al-e:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr0404hf-s-e:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr0404hf-u-e:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr0804:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr0804hd-l:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
- cpe:2.3:h:dahuasecurity:dvr0404hd-a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr0404hd-l:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr0404hd-s:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr0404hd-u:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr0404hf-a-e:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr0404hf-al-e:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr0404hf-s-e:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr0404hf-u-e:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr0804:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr0804hd-l:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
Show 55 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:dahuasecurity:dvr0804hd-s:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr0804hf-a-e:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr0804hf-al-e:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr0804hf-l-e:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr0804hf-s-e:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr0804hf-u-e:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr1604hd-l:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr1604hd-s:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr1604hf-a-e:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr1604hf-al-e:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr1604hf-l-e:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr1604hf-s-e:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr1604hf-u-e:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2104c:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2104h:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2104hc:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2104he:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2108c:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2108h:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2108hc:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2108he:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2116c:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2116h:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2116hc:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2116he:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2404hf-s:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2404lf-al:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr2404lf-s:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr3204hf-s:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr3204lf-al:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr3204lf-s:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr3224l:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr3232l:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5104c:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5104h:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5104he:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5108c:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5108h:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5108he:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5116c:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5116h:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5116he:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5204a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5204l:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5208a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5208l:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5216a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5216l:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5404:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5408:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5416:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5804:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5808:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr5816:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
| cpe:2.3:h:dahuasecurity:dvr6404lf-s:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dahua Technologies |
- cpe:2.3:h:dahuasecurity:dvr0804hd-s:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr0804hf-a-e:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr0804hf-al-e:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr0804hf-l-e:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr0804hf-s-e:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr0804hf-u-e:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr1604hd-l:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr1604hd-s:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr1604hf-a-e:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr1604hf-al-e:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr1604hf-l-e:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr1604hf-s-e:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr1604hf-u-e:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2104c:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2104h:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2104hc:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2104he:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2108c:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2108h:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2108hc:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2108he:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2116c:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2116h:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2116hc:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2116he:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2404hf-s:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2404lf-al:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr2404lf-s:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr3204hf-s:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr3204lf-al:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr3204lf-s:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr3224l:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr3232l:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5104c:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5104h:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5104he:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5108c:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5108h:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5108he:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5116c:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5116h:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5116he:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5204a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5204l:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5208a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5208l:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5216a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5216l:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5404:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5408:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5416:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5804:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5808:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr5816:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
- cpe:2.3:h:dahuasecurity:dvr6404lf-s:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dahua Technologies
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2013-3613
- 2026-10-03 Alias added: GHSA-j3x8-8c44-4q7h
References
Advisory 1
More Dahua Technologies Dvr0404hd-a vulnerabilities
- TI-2013-03156 Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an… CVSS 2.0HIGH 10.0
- TI-2013-03158 Dahua DVR appliances have a small value for the maximum password length, which makes it… CVSS 2.0HIGH 9.3
- TI-2013-04891 The authorization implementation on Dahua DVR appliances accepts a hash string… CVSS 2.0HIGH 10.0
- TI-2013-03159 Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes… CVSS 2.0HIGH 7.8
Sources
- CVE-2013-3613 · CVE Program
- CVE-2013-3613 · NVD
- FIRST EPSS
- GHSA-j3x8-8c44-4q7h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences