CVE-2013-3612: Dahuasecurity DVR0404HD-A
High severity, CVSS 10.0. EPSS: 10.3% chance of exploitation in the next 30 days.
Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving (a) ActiveX, (b) a standalone client, or (c) unknown other vectors.
Affected products
- Dahuasecurity DVR0404HD-A: affected versions not specified
- Dahuasecurity DVR0404HD-L: affected versions not specified
- Dahuasecurity DVR0404HD-S: affected versions not specified
- Dahuasecurity DVR0404HD-U: affected versions not specified
- Dahuasecurity DVR0404HF-A-E: affected versions not specified
- Dahuasecurity DVR0404HF-Al-E: affected versions not specified
- Dahuasecurity DVR0404HF-S-E: affected versions not specified
- Dahuasecurity DVR0404HF-U-E: affected versions not specified
- Dahuasecurity DVR0804: affected versions not specified
- Dahuasecurity DVR0804HD-L: affected versions not specified
- Dahuasecurity DVR0804HD-S: affected versions not specified
- Dahuasecurity DVR0804HF-A-E: affected versions not specified
- Dahuasecurity DVR0804HF-Al-E: affected versions not specified
- Dahuasecurity DVR0804HF-L-E: affected versions not specified
- Dahuasecurity DVR0804HF-S-E: affected versions not specified
- Dahuasecurity DVR0804HF-U-E: affected versions not specified
- Dahuasecurity DVR1604HD-L: affected versions not specified
- Dahuasecurity DVR1604HD-S: affected versions not specified
- Dahuasecurity DVR1604HF-A-E: affected versions not specified
- Dahuasecurity DVR1604HF-Al-E: affected versions not specified
- Dahuasecurity DVR1604HF-L-E: affected versions not specified
- Dahuasecurity DVR1604HF-S-E: affected versions not specified
- Dahuasecurity DVR1604HF-U-E: affected versions not specified
- Dahuasecurity DVR2104C: affected versions not specified
- Dahuasecurity DVR2104H: affected versions not specified
- and 40 more
Published 2013-09-17. Last modified 2026-06-16.