CVE-2013-3613: Dahuasecurity DVR0404HD-A

High severity, CVSS 7.8. EPSS: 6.7% chance of exploitation in the next 30 days.

Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port.

Affected products

• Dahuasecurity DVR0404HD-A: affected versions not specified
• Dahuasecurity DVR0404HD-L: affected versions not specified
• Dahuasecurity DVR0404HD-S: affected versions not specified
• Dahuasecurity DVR0404HD-U: affected versions not specified
• Dahuasecurity DVR0404HF-A-E: affected versions not specified
• Dahuasecurity DVR0404HF-Al-E: affected versions not specified
• Dahuasecurity DVR0404HF-S-E: affected versions not specified
• Dahuasecurity DVR0404HF-U-E: affected versions not specified
• Dahuasecurity DVR0804: affected versions not specified
• Dahuasecurity DVR0804HD-L: affected versions not specified
• Dahuasecurity DVR0804HD-S: affected versions not specified
• Dahuasecurity DVR0804HF-A-E: affected versions not specified
• Dahuasecurity DVR0804HF-Al-E: affected versions not specified
• Dahuasecurity DVR0804HF-L-E: affected versions not specified
• Dahuasecurity DVR0804HF-S-E: affected versions not specified
• Dahuasecurity DVR0804HF-U-E: affected versions not specified
• Dahuasecurity DVR1604HD-L: affected versions not specified
• Dahuasecurity DVR1604HD-S: affected versions not specified
• Dahuasecurity DVR1604HF-A-E: affected versions not specified
• Dahuasecurity DVR1604HF-Al-E: affected versions not specified
• Dahuasecurity DVR1604HF-L-E: affected versions not specified
• Dahuasecurity DVR1604HF-S-E: affected versions not specified
• Dahuasecurity DVR1604HF-U-E: affected versions not specified
• Dahuasecurity DVR2104C: affected versions not specified
• Dahuasecurity DVR2104H: affected versions not specified
• and 40 more

Published 2013-09-17. Last modified 2026-06-16.