CVE-2013-6117
EXPLOITEDDahua DVR 2.608.0000.0 and 2.608.GV00.0 - Unauthenticated Authentication Bypass via TCP Port 37777
Title source: llmExploitation Summary
CVE-2013-6117 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 4 public exploits from researchers including Jake Reynolds, milo2012, fsn4k3, including a Metasploit module auxiliary/scanner/misc/dahua_dvr_auth_bypass.
AI-analyzed exploit summary This is a Metasploit module that exploits an authentication bypass vulnerability in Dahua DVRs by sending crafted binary protocol commands to TCP port 37777. It can extract sensitive information (e.g., credentials, firmware version) and perform actions like password resets and log clearing without authentication.
Description
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.
Exploits (4)
This is a Metasploit module that exploits an authentication bypass vulnerability in Dahua DVRs by sending crafted binary protocol commands to TCP port 37777. It can extract sensitive information (e.g., credentials, firmware version) and perform actions like password resets and log clearing without authentication.
This Go-based exploit targets CVE-2013-6117, an authentication bypass vulnerability in Dahua DVR devices. It sends a crafted packet to port 37777 to extract DDNS credentials (username/password) from vulnerable devices.
This Metasploit module exploits CVE-2013-6117, an authentication bypass vulnerability in Dahua DVR devices. It interacts with the binary TCP protocol on port 37777 to extract sensitive information (version, serial, email settings, etc.) and optionally resets user passwords or clears logs.
This Metasploit module exploits an authentication bypass vulnerability in Dahua DVR devices (CVE-2013-6117) by sending crafted binary payloads to port 37777. It can extract sensitive information (version, serial, user credentials, etc.) and optionally reset passwords or clear logs.