The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote attackers to obtain administrative access and change the administrator password via requests involving (1) ActiveX, (2) a standalone client, or (3) unspecified other vectors, a different vulnerability than CVE-2013-3612.
References
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2013-09-17T10:00:00Z

Updated: 2024-09-16T17:47:41.217Z

Reserved: 2013-09-17T00:00:00Z

Link: CVE-2013-5754

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2013-09-17T12:04:28.820

Modified: 2013-09-25T18:07:11.647

Link: CVE-2013-5754

cve-icon Redhat

No data.