CVE-2013-3615: Dahuasecurity DVR0404HD-A

High severity, CVSS 7.8. EPSS: 7.7% chance of exploitation in the next 30 days.

Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.

Affected products

• Dahuasecurity DVR0404HD-A: affected versions not specified
• Dahuasecurity DVR0404HD-L: affected versions not specified
• Dahuasecurity DVR0404HD-S: affected versions not specified
• Dahuasecurity DVR0404HD-U: affected versions not specified
• Dahuasecurity DVR0404HF-A-E: affected versions not specified
• Dahuasecurity DVR0404HF-Al-E: affected versions not specified
• Dahuasecurity DVR0404HF-S-E: affected versions not specified
• Dahuasecurity DVR0404HF-U-E: affected versions not specified
• Dahuasecurity DVR0804: affected versions not specified
• Dahuasecurity DVR0804HD-L: affected versions not specified
• Dahuasecurity DVR0804HD-S: affected versions not specified
• Dahuasecurity DVR0804HF-A-E: affected versions not specified
• Dahuasecurity DVR0804HF-Al-E: affected versions not specified
• Dahuasecurity DVR0804HF-L-E: affected versions not specified
• Dahuasecurity DVR0804HF-S-E: affected versions not specified
• Dahuasecurity DVR0804HF-U-E: affected versions not specified
• Dahuasecurity DVR1604HD-L: affected versions not specified
• Dahuasecurity DVR1604HD-S: affected versions not specified
• Dahuasecurity DVR1604HF-A-E: affected versions not specified
• Dahuasecurity DVR1604HF-Al-E: affected versions not specified
• Dahuasecurity DVR1604HF-L-E: affected versions not specified
• Dahuasecurity DVR1604HF-S-E: affected versions not specified
• Dahuasecurity DVR1604HF-U-E: affected versions not specified
• Dahuasecurity DVR2104C: affected versions not specified
• Dahuasecurity DVR2104H: affected versions not specified
• and 40 more

Published 2013-09-17. Last modified 2026-06-16.