CVE-2013-6117
CVE-2013-6117
Vexday Risk Score
82Fix now
SSVC decision (CISA)
Act
Exploitation + impact → act immediately
Exploit maturity
Functional exploit
Popular PoC on GitHub (8 stars) — exploitation code widely available.
CVSS —EPSS 70.7%KEV nãoPoC públicaNuclei —Metasploit simPatch —
Lifecycle
18 Nov 2013Public PoC
11 Jul 2014Published on NVD
Recommendation: Patch as soon as possible — active exploitation confirmed.
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.
Affected products
n/a · n/apublic PoCs found — 7
githubgithub.com/milo2012/CVE-2013-6117★ 8githubgithub.com/fsn4k3/dahua-dvr-metasploit★ 0cve_referencewww.exploit-db.com/exploits/29673unverifiedcve_referencepacketstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.htmlunverifiedexploitdbwww.exploit-db.com/exploits/29673unverifiedvulncheckvulncheck.com/xdb/352b3a12c3fdunverifiedvulncheckvulncheck.com/xdb/5bb4f2337dfcunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.