CVE-2013-1391

Published: Oct 30, 2019Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration.

Affected (20)

Products: Huntcctv: Dvr 04ch Firmware, Dvr 04nc Firmware, Dvr 08ch Firmware, Dvr 08nc Firmware, Dvr 16ch Firmware, Dr6 704a4h Firmware, Dr6 708a4h Firmware, Dr6 7316a4h Firmware, Dr6 7316a4hl Firmware, Hdr 04kd Firmware, Hdr 08kd Firmware · Capturecctv: Cdr 0410ve Firmware, Cdr 0820vde Firmware · Hachi: Hv 04rd Pro Firmware, Hv 08rd Pro Firmware · +2 more

Show all products

11 products

Dr6 7316a4hl Firmware

2 products

2 products

3 products

2 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huntcctv Dvr 04ch Firmware	All versions

Running on/with	Platform Versions
Huntcctv Dvr 04ch	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huntcctv Dvr 04nc Firmware	All versions

Running on/with	Platform Versions
Huntcctv Dvr 04nc	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huntcctv Dvr 08ch Firmware	All versions

Running on/with	Platform Versions
Huntcctv Dvr 08ch	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huntcctv Dvr 08nc Firmware	All versions

Running on/with	Platform Versions
Huntcctv Dvr 08nc	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huntcctv Dvr 16ch Firmware	All versions

Running on/with	Platform Versions
Huntcctv Dvr 16ch	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huntcctv Dr6 704a4h Firmware	All versions

Running on/with	Platform Versions
Huntcctv Dr6 704a4h	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huntcctv Dr6 708a4h Firmware	All versions

Running on/with	Platform Versions
Huntcctv Dr6 708a4h	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huntcctv Dr6 7316a4h Firmware	All versions

Running on/with	Platform Versions
Huntcctv Dr6 7316a4h	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huntcctv Dr6 7316a4hl Firmware	All versions

Running on/with	Platform Versions
Huntcctv Dr6 7316a4hl	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huntcctv Hdr 04kd Firmware	All versions

Running on/with	Platform Versions
Huntcctv Hdr 04kd	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huntcctv Hdr 08kd Firmware	All versions

Running on/with	Platform Versions
Huntcctv Hdr 08kd	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Capturecctv Cdr 0410ve Firmware	All versions

Running on/with	Platform Versions
Capturecctv Cdr 0410ve	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Capturecctv Cdr 0820vde Firmware	All versions

Running on/with	Platform Versions
Capturecctv Cdr 0820vde	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hachi Hv 04rd Pro Firmware	All versions

Running on/with	Platform Versions
Hachi Hv 04rd Pro	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hachi Hv 08rd Pro Firmware	All versions

Running on/with	Platform Versions
Hachi Hv 08rd Pro	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Novuscctv Nv Dvr1204 Firmware	All versions

Running on/with	Platform Versions
Novuscctv Nv Dvr1204	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Novuscctv Nv Dvr1208 Firmware	All versions

Running on/with	Platform Versions
Novuscctv Nv Dvr1208	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Novuscctv Nv Dvr1216 Firmware	All versions

Running on/with	Platform Versions
Novuscctv Nv Dvr1216	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Vsp Tw Dvr604 Firmware	All versions

Running on/with	Platform Versions
Vsp Tw Dvr604	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Vsp Tw Dvr616 Firmware	All versions

Running on/with	Platform Versions
Vsp Tw Dvr616	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (6)

http://www.securitybydefault.com/2013/01/12000-grabadores-de-video-expuestos-en.html

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.rapid7.com/db/modules/auxiliary/scanner/misc/dvr_config_disclosure

Source: cve@mitre.org

Third Party Advisory

https://www.securityfocus.com/bid/57579/info

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://www.securitybydefault.com/2013/01/12000-grabadores-de-video-expuestos-en.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.rapid7.com/db/modules/auxiliary/scanner/misc/dvr_config_disclosure

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.securityfocus.com/bid/57579/info

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

Timeline

No history available yet.