Dahuasecurity Dvr6404lf-s — known CVE vulnerabilities

Every CVE whose affected-product data names Dahuasecurity Dvr6404lf-s, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2013-3612 — CVSS 10.0 (critical): Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier…
• CVE-2013-5754 — CVSS 10.0 (critical): The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master…
• CVE-2013-3614 — CVSS 9.3 (critical): Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a…
• CVE-2013-3613 — CVSS 7.8 (high): Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors…
• CVE-2013-3615 — CVSS 7.8 (high): Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to…