CVE-2013-6117: Dahuasecurity Dvr Firmware

High severity, CVSS 7.5. EPSS: 69.7% chance of exploitation in the next 30 days.

Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.

Affected products

• Dahuasecurity Dvr Firmware: version 2.608.0000.0 only; version 2.608.gv00.0 only

Published 2014-07-11. Last modified 2026-06-16.