Description (CNA)
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://seclists.org/bugtraq/2013/Nov/62
- http://www.osvdb.org/99783
- http://packetstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.html
- http://www.exploit-db.com/exploits/29673
- http://blog.depthsecurity.com/2013/11/dahua-dvr-authentication-bypass-cve.html
ADP enrichment
No English description supplied.