CVE-2013-5754
The authorization implementation on Dahua DVR appliances accepts a hash string representing the...
The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote attackers to obtain administrative access and change the administrator password via requests involving (1) ActiveX, (2) a standalone client, or (3) unspecified other vectors, a different vulnerability than CVE-2013-3612.
Exploit likelihood
What each source reports
NVD Score used
The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote attackers to obtain administrative access and change the administrator password via requests involving (1) ActiveX, (2) a standalone client, or (3) unspecified other vectors, a different vulnerability than CVE-2013-3612.
- Record
CVE-2013-5754- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote attackers to obtain administrative access and change the administrator password via requests involving (1) ActiveX, (2) a standalone client, or (3) unspecified other vectors, a different vulnerability than CVE-2013-3612.
- Record
CVE-2013-5754- Updated
- 2026-11-02
EUVDEUVD-2013-5590 No score
The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote attackers to obtain administrative access and change the administrator password via requests involving (1) ActiveX, (2) a standalone client, or (3) unspecified other vectors, a different vulnerability than CVE-2013-3612.
- Record
EUVD-2013-5590- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hprw-r36q-86cc No score
The authorization implementation on Dahua DVR appliances accepts a hash string representing the...
The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote attackers to obtain administrative access and change the administrator password via requests involving (1) ActiveX, (2) a standalone client, or (3) unspecified other vectors, a different vulnerability than CVE-2013-3612.
- Record
GHSA-hprw-r36q-86cc- Updated
- 2026-11-02
Affected products
- dahuasecurity dvr0404hd-a
- dahuasecurity dvr0404hd-l
- dahuasecurity dvr0404hd-s
- dahuasecurity dvr0404hd-u
- dahuasecurity dvr0404hf-a-e
- dahuasecurity dvr0404hf-al-e
- dahuasecurity dvr0404hf-s-e
- dahuasecurity dvr0404hf-u-e
- dahuasecurity dvr0804
- dahuasecurity dvr0804hd-l
- dahuasecurity dvr0804hd-s
- dahuasecurity dvr0804hf-a-e
Show 53 moreShow less
- dahuasecurity dvr0804hf-al-e
- dahuasecurity dvr0804hf-l-e
- dahuasecurity dvr0804hf-s-e
- dahuasecurity dvr0804hf-u-e
- dahuasecurity dvr1604hd-l
- dahuasecurity dvr1604hd-s
- dahuasecurity dvr1604hf-a-e
- dahuasecurity dvr1604hf-al-e
- dahuasecurity dvr1604hf-l-e
- dahuasecurity dvr1604hf-s-e
- dahuasecurity dvr1604hf-u-e
- dahuasecurity dvr2104c
- dahuasecurity dvr2104h
- dahuasecurity dvr2104hc
- dahuasecurity dvr2104he
- dahuasecurity dvr2108c
- dahuasecurity dvr2108h
- dahuasecurity dvr2108hc
- dahuasecurity dvr2108he
- dahuasecurity dvr2116c
- dahuasecurity dvr2116h
- dahuasecurity dvr2116hc
- dahuasecurity dvr2116he
- dahuasecurity dvr2404hf-s
- dahuasecurity dvr2404lf-al
- dahuasecurity dvr2404lf-s
- dahuasecurity dvr3204hf-s
- dahuasecurity dvr3204lf-al
- dahuasecurity dvr3204lf-s
- dahuasecurity dvr3224l
- dahuasecurity dvr3232l
- dahuasecurity dvr5104c
- dahuasecurity dvr5104h
- dahuasecurity dvr5104he
- dahuasecurity dvr5108c
- dahuasecurity dvr5108h
- dahuasecurity dvr5108he
- dahuasecurity dvr5116c
- dahuasecurity dvr5116h
- dahuasecurity dvr5116he
- dahuasecurity dvr5204a
- dahuasecurity dvr5204l
- dahuasecurity dvr5208a
- dahuasecurity dvr5208l
- dahuasecurity dvr5216a
- dahuasecurity dvr5216l
- dahuasecurity dvr5404
- dahuasecurity dvr5408
- dahuasecurity dvr5416
- dahuasecurity dvr5804
- dahuasecurity dvr5808
- dahuasecurity dvr5816
- dahuasecurity dvr6404lf-s
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-5754 is a high vulnerability (CVSS 10.0) in Dahuasecurity Dvr0404hd-a, published September 17, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.59%, the 89th percentile. No source names a fixed version.