{"id":"CVE-2013-3615","aliases":["EUVD-2013-3549","GHSA-gwxv-f7fw-95g4"],"status":"published","title":"Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it...","description":"Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.","severity":{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:C/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.07655,"percentile":0.94619,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-255"],"published":"2013-09-17T10:00:00Z","modified":"2026-06-16T23:55:31Z","exploits":[{"source":"exploitdb","id":"EDB-29673","title":"Dahua DVR 2.608.0000.0/2.608.GV00.0 - Authentication Bypass (Metasploit)","type":"webapps","platform":"hardware","date":"2013-11-18","url":"https://www.exploit-db.com/exploits/29673"}],"products":[{"vendor":"dahuasecurity","product":"dvr0404hd-a"},{"vendor":"dahuasecurity","product":"dvr0404hd-l"},{"vendor":"dahuasecurity","product":"dvr0404hd-s"},{"vendor":"dahuasecurity","product":"dvr0404hd-u"},{"vendor":"dahuasecurity","product":"dvr0404hf-a-e"},{"vendor":"dahuasecurity","product":"dvr0404hf-al-e"},{"vendor":"dahuasecurity","product":"dvr0404hf-s-e"},{"vendor":"dahuasecurity","product":"dvr0404hf-u-e"},{"vendor":"dahuasecurity","product":"dvr0804"},{"vendor":"dahuasecurity","product":"dvr0804hd-l"},{"vendor":"dahuasecurity","product":"dvr0804hd-s"},{"vendor":"dahuasecurity","product":"dvr0804hf-a-e"},{"vendor":"dahuasecurity","product":"dvr0804hf-al-e"},{"vendor":"dahuasecurity","product":"dvr0804hf-l-e"},{"vendor":"dahuasecurity","product":"dvr0804hf-s-e"},{"vendor":"dahuasecurity","product":"dvr0804hf-u-e"},{"vendor":"dahuasecurity","product":"dvr1604hd-l"},{"vendor":"dahuasecurity","product":"dvr1604hd-s"},{"vendor":"dahuasecurity","product":"dvr1604hf-a-e"},{"vendor":"dahuasecurity","product":"dvr1604hf-al-e"},{"vendor":"dahuasecurity","product":"dvr1604hf-l-e"},{"vendor":"dahuasecurity","product":"dvr1604hf-s-e"},{"vendor":"dahuasecurity","product":"dvr1604hf-u-e"},{"vendor":"dahuasecurity","product":"dvr2104c"},{"vendor":"dahuasecurity","product":"dvr2104h"},{"vendor":"dahuasecurity","product":"dvr2104hc"},{"vendor":"dahuasecurity","product":"dvr2104he"},{"vendor":"dahuasecurity","product":"dvr2108c"},{"vendor":"dahuasecurity","product":"dvr2108h"},{"vendor":"dahuasecurity","product":"dvr2108hc"},{"vendor":"dahuasecurity","product":"dvr2108he"},{"vendor":"dahuasecurity","product":"dvr2116c"},{"vendor":"dahuasecurity","product":"dvr2116h"},{"vendor":"dahuasecurity","product":"dvr2116hc"},{"vendor":"dahuasecurity","product":"dvr2116he"},{"vendor":"dahuasecurity","product":"dvr2404hf-s"},{"vendor":"dahuasecurity","product":"dvr2404lf-al"},{"vendor":"dahuasecurity","product":"dvr2404lf-s"},{"vendor":"dahuasecurity","product":"dvr3204hf-s"},{"vendor":"dahuasecurity","product":"dvr3204lf-al"},{"vendor":"dahuasecurity","product":"dvr3204lf-s"},{"vendor":"dahuasecurity","product":"dvr3224l"},{"vendor":"dahuasecurity","product":"dvr3232l"},{"vendor":"dahuasecurity","product":"dvr5104c"},{"vendor":"dahuasecurity","product":"dvr5104h"},{"vendor":"dahuasecurity","product":"dvr5104he"},{"vendor":"dahuasecurity","product":"dvr5108c"},{"vendor":"dahuasecurity","product":"dvr5108h"},{"vendor":"dahuasecurity","product":"dvr5108he"},{"vendor":"dahuasecurity","product":"dvr5116c"},{"vendor":"dahuasecurity","product":"dvr5116h"},{"vendor":"dahuasecurity","product":"dvr5116he"},{"vendor":"dahuasecurity","product":"dvr5204a"},{"vendor":"dahuasecurity","product":"dvr5204l"},{"vendor":"dahuasecurity","product":"dvr5208a"},{"vendor":"dahuasecurity","product":"dvr5208l"},{"vendor":"dahuasecurity","product":"dvr5216a"},{"vendor":"dahuasecurity","product":"dvr5216l"},{"vendor":"dahuasecurity","product":"dvr5404"},{"vendor":"dahuasecurity","product":"dvr5408"},{"vendor":"dahuasecurity","product":"dvr5416"},{"vendor":"dahuasecurity","product":"dvr5804"},{"vendor":"dahuasecurity","product":"dvr5808"},{"vendor":"dahuasecurity","product":"dvr5816"},{"vendor":"dahuasecurity","product":"dvr6404lf-s"}],"references":[{"url":"http://www.kb.cert.org/vuls/id/800094","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-3615"},{"url":"https://github.com/advisories/GHSA-gwxv-f7fw-95g4"}],"sources":{"cve":[{"id":"CVE-2013-3615","description":"Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.","status":"published","published":"2013-09-17T10:00:00Z","modified":"2024-09-16T23:26:38.96Z","updated_at":"2026-11-02T14:34:57.195423Z"}],"euvd":[{"id":"EUVD-2013-3549","description":"Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.","status":"published","published":"2013-09-17T10:00:00Z","modified":"2024-09-16T23:26:38Z","updated_at":"2026-11-03T00:54:50.364031Z"}],"ghsa":[{"id":"GHSA-gwxv-f7fw-95g4","title":"Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it...","description":"Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.","status":"published","published":"2022-05-17T05:04:46Z","modified":"2023-01-28T05:03:04Z","updated_at":"2026-11-02T14:43:54.031093Z"}],"nvd":[{"id":"CVE-2013-3615","description":"Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.","status":"published","published":"2013-09-17T12:04:24.773Z","modified":"2026-06-16T23:55:31.027Z","cvss":[{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:C/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-255"],"updated_at":"2026-11-02T14:02:35.248411Z"}]}}