kbrain

CVE-2013-5754

HIGH · CVSS 10.0EPSS 3.6%EU EUVD

The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote attackers to obtain administrative access and change the administrator password via requests involving (1) ActiveX, (2) a standalone client, or (3) unspecified other vectors, a different vulnerability than CVE-2013-3612.

Key facts

CVSS score
10.0 (v2.0)
Severity
HIGH
CVSS vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness (CWE)
CWE-264
EPSS score
3.6% (89th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2013-5590)
Published
September 17, 2013
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2013-5590 in the EU Vulnerability Database. Last updated in EUVD on September 16, 2024.

View on the EU Vulnerability Database

Affected products

  • dahuasecurity / dvr0404hd-a
  • dahuasecurity / dvr0404hd-l
  • dahuasecurity / dvr0404hd-s
  • dahuasecurity / dvr0404hd-u
  • dahuasecurity / dvr0404hf-a-e
  • dahuasecurity / dvr0404hf-al-e
  • dahuasecurity / dvr0404hf-s-e
  • dahuasecurity / dvr0404hf-u-e
  • dahuasecurity / dvr0804
  • dahuasecurity / dvr0804hd-l
  • dahuasecurity / dvr0804hd-s
  • dahuasecurity / dvr0804hf-a-e
  • dahuasecurity / dvr0804hf-al-e
  • dahuasecurity / dvr0804hf-l-e
  • dahuasecurity / dvr0804hf-s-e
  • dahuasecurity / dvr0804hf-u-e
  • dahuasecurity / dvr1604hd-l
  • dahuasecurity / dvr1604hd-s
  • dahuasecurity / dvr1604hf-a-e
  • dahuasecurity / dvr1604hf-al-e
  • dahuasecurity / dvr1604hf-l-e
  • dahuasecurity / dvr1604hf-s-e
  • dahuasecurity / dvr1604hf-u-e
  • dahuasecurity / dvr2104c
  • dahuasecurity / dvr2104h
  • dahuasecurity / dvr2104hc
  • dahuasecurity / dvr2104he
  • dahuasecurity / dvr2108c
  • dahuasecurity / dvr2108h
  • dahuasecurity / dvr2108hc
  • dahuasecurity / dvr2108he
  • dahuasecurity / dvr2116c
  • dahuasecurity / dvr2116h
  • dahuasecurity / dvr2116hc
  • dahuasecurity / dvr2116he
  • dahuasecurity / dvr2404hf-s
  • dahuasecurity / dvr2404lf-al
  • dahuasecurity / dvr2404lf-s
  • dahuasecurity / dvr3204hf-s
  • dahuasecurity / dvr3204lf-al
  • dahuasecurity / dvr3204lf-s
  • dahuasecurity / dvr3224l
  • dahuasecurity / dvr3232l
  • dahuasecurity / dvr5104c
  • dahuasecurity / dvr5104h
  • dahuasecurity / dvr5104he
  • dahuasecurity / dvr5108c
  • dahuasecurity / dvr5108h
  • dahuasecurity / dvr5108he
  • dahuasecurity / dvr5116c

and 15 more…

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain