CVE-2013-6117
EXPLOITEDDahuasecurity Dvr Firmware - Authentication Bypass
Title source: ruleDescription
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.
Exploits (3)
metasploit
WORKING POC
by Tyler Bennett - Talos Consulting, Jake Reynolds - Depth Security · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/dahua_dvr_auth_bypass.rb
exploitdb
WORKING POC
by Jake Reynolds · textwebappshardware
https://www.exploit-db.com/exploits/29673
References (5)
Scores
EPSS
0.8973
EPSS Percentile
99.6%
Exploitation Intel
VulnCheck KEV
2025-02-27
Classification
CWE
CWE-287
Status
draft
Affected Products (2)
dahuasecurity/dvr_firmware
dahuasecurity/dvr_firmware
Timeline
Published
Jul 11, 2014
Tracked Since
Feb 18, 2026