kbrain

CVE-2013-3613

HIGH · CVSS 7.8EPSS 6.7%EU EUVD

Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port.

Key facts

CVSS score
7.8 (v2.0)
Severity
HIGH
CVSS vector
AV:N/AC:L/Au:N/C:C/I:N/A:N
Weakness (CWE)
CWE-287
EPSS score
6.7% (94th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2013-3547)
Published
September 17, 2013
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2013-3547 in the EU Vulnerability Database. Last updated in EUVD on September 16, 2024.

View on the EU Vulnerability Database

Affected products

  • dahuasecurity / dvr0404hd-a
  • dahuasecurity / dvr0404hd-l
  • dahuasecurity / dvr0404hd-s
  • dahuasecurity / dvr0404hd-u
  • dahuasecurity / dvr0404hf-a-e
  • dahuasecurity / dvr0404hf-al-e
  • dahuasecurity / dvr0404hf-s-e
  • dahuasecurity / dvr0404hf-u-e
  • dahuasecurity / dvr0804
  • dahuasecurity / dvr0804hd-l
  • dahuasecurity / dvr0804hd-s
  • dahuasecurity / dvr0804hf-a-e
  • dahuasecurity / dvr0804hf-al-e
  • dahuasecurity / dvr0804hf-l-e
  • dahuasecurity / dvr0804hf-s-e
  • dahuasecurity / dvr0804hf-u-e
  • dahuasecurity / dvr1604hd-l
  • dahuasecurity / dvr1604hd-s
  • dahuasecurity / dvr1604hf-a-e
  • dahuasecurity / dvr1604hf-al-e
  • dahuasecurity / dvr1604hf-l-e
  • dahuasecurity / dvr1604hf-s-e
  • dahuasecurity / dvr1604hf-u-e
  • dahuasecurity / dvr2104c
  • dahuasecurity / dvr2104h
  • dahuasecurity / dvr2104hc
  • dahuasecurity / dvr2104he
  • dahuasecurity / dvr2108c
  • dahuasecurity / dvr2108h
  • dahuasecurity / dvr2108hc
  • dahuasecurity / dvr2108he
  • dahuasecurity / dvr2116c
  • dahuasecurity / dvr2116h
  • dahuasecurity / dvr2116hc
  • dahuasecurity / dvr2116he
  • dahuasecurity / dvr2404hf-s
  • dahuasecurity / dvr2404lf-al
  • dahuasecurity / dvr2404lf-s
  • dahuasecurity / dvr3204hf-s
  • dahuasecurity / dvr3204lf-al
  • dahuasecurity / dvr3204lf-s
  • dahuasecurity / dvr3224l
  • dahuasecurity / dvr3232l
  • dahuasecurity / dvr5104c
  • dahuasecurity / dvr5104h
  • dahuasecurity / dvr5104he
  • dahuasecurity / dvr5108c
  • dahuasecurity / dvr5108h
  • dahuasecurity / dvr5108he
  • dahuasecurity / dvr5116c

and 15 more…

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain