CVE-2013-1391
Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi...
Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration.
- Record
CVE-2013-1391- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration.
- Record
CVE-2013-1391- Updated
- 2026-11-02
EUVDEUVD-2013-1430 No score
Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration.
- Record
EUVD-2013-1430- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pjmg-9mfx-vg44
Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi...
Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration.
- Record
GHSA-pjmg-9mfx-vg44- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
- capturecctv cdr 0410ve firmware
- capturecctv cdr 0820vde firmware
- hachi hv-04rd pro firmware
- hachi hv-08rd pro firmware
- huntcctv dr6-704a4h firmware
- huntcctv dr6-708a4h firmware
- huntcctv dr6-7316a4h firmware
- huntcctv dr6-7316a4hl firmware
- huntcctv dvr-04ch firmware
- huntcctv dvr-04nc firmware
- huntcctv dvr-08ch firmware
- huntcctv dvr-08nc firmware
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Multiple Hunt CCTV - Information Disclosure | 2013-01-29 |
| Metasploit | Multiple DVR Manufacturers Configuration Disclosure |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-1391 is a high vulnerability (CVSS 7.5) in Capturecctv Cdr 0410ve Firmware, published October 30, 2019. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 76.1%, the 99th percentile. No source names a fixed version.