CVE-2013-1391 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2013-1391

Analyzed

More Info Official Page

Source-cve@mitre.org

Published At-30 Oct, 2019 | 21:15

Updated At-05 Nov, 2019 | 16:33

Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

huntcctv>>dvr-04ch_firmware>>-

cpe:2.3:o:huntcctv:dvr-04ch_firmware:-:*:*:*:*:*:*:*

huntcctv>>dvr-04ch>>-

cpe:2.3:h:huntcctv:dvr-04ch:-:*:*:*:*:*:*:*

huntcctv>>dvr-04nc_firmware>>-

cpe:2.3:o:huntcctv:dvr-04nc_firmware:-:*:*:*:*:*:*:*

huntcctv>>dvr-04nc>>-

cpe:2.3:h:huntcctv:dvr-04nc:-:*:*:*:*:*:*:*

huntcctv>>dvr-08ch_firmware>>-

cpe:2.3:o:huntcctv:dvr-08ch_firmware:-:*:*:*:*:*:*:*

huntcctv>>dvr-08ch>>-

cpe:2.3:h:huntcctv:dvr-08ch:-:*:*:*:*:*:*:*

huntcctv>>dvr-08nc_firmware>>-

cpe:2.3:o:huntcctv:dvr-08nc_firmware:-:*:*:*:*:*:*:*

huntcctv>>dvr-08nc>>-

cpe:2.3:h:huntcctv:dvr-08nc:-:*:*:*:*:*:*:*

huntcctv>>dvr-16ch_firmware>>-

cpe:2.3:o:huntcctv:dvr-16ch_firmware:-:*:*:*:*:*:*:*

huntcctv>>dvr-16ch>>-

cpe:2.3:h:huntcctv:dvr-16ch:-:*:*:*:*:*:*:*

huntcctv>>dr6-704a4h_firmware>>-

cpe:2.3:o:huntcctv:dr6-704a4h_firmware:-:*:*:*:*:*:*:*

huntcctv>>dr6-704a4h>>-

cpe:2.3:h:huntcctv:dr6-704a4h:-:*:*:*:*:*:*:*

huntcctv>>dr6-708a4h_firmware>>-

cpe:2.3:o:huntcctv:dr6-708a4h_firmware:-:*:*:*:*:*:*:*

huntcctv>>dr6-708a4h>>-

cpe:2.3:h:huntcctv:dr6-708a4h:-:*:*:*:*:*:*:*

huntcctv>>dr6-7316a4h_firmware>>-

cpe:2.3:o:huntcctv:dr6-7316a4h_firmware:-:*:*:*:*:*:*:*

huntcctv>>dr6-7316a4h>>-

cpe:2.3:h:huntcctv:dr6-7316a4h:-:*:*:*:*:*:*:*

huntcctv>>dr6-7316a4hl_firmware>>-

cpe:2.3:o:huntcctv:dr6-7316a4hl_firmware:-:*:*:*:*:*:*:*

huntcctv>>dr6-7316a4hl>>-

cpe:2.3:h:huntcctv:dr6-7316a4hl:-:*:*:*:*:*:*:*

huntcctv>>hdr-04kd_firmware>>-

cpe:2.3:o:huntcctv:hdr-04kd_firmware:-:*:*:*:*:*:*:*

huntcctv>>hdr-04kd>>-

cpe:2.3:h:huntcctv:hdr-04kd:-:*:*:*:*:*:*:*

huntcctv>>hdr-08kd_firmware>>-

cpe:2.3:o:huntcctv:hdr-08kd_firmware:-:*:*:*:*:*:*:*

huntcctv>>hdr-08kd>>-

cpe:2.3:h:huntcctv:hdr-08kd:-:*:*:*:*:*:*:*

capturecctv>>cdr_0410ve_firmware>>-

cpe:2.3:o:capturecctv:cdr_0410ve_firmware:-:*:*:*:*:*:*:*

capturecctv>>cdr_0410ve>>-

cpe:2.3:h:capturecctv:cdr_0410ve:-:*:*:*:*:*:*:*

capturecctv>>cdr_0820vde_firmware>>-

cpe:2.3:o:capturecctv:cdr_0820vde_firmware:-:*:*:*:*:*:*:*

capturecctv>>cdr_0820vde>>-

cpe:2.3:h:capturecctv:cdr_0820vde:-:*:*:*:*:*:*:*

hachi>>hv-04rd_pro_firmware>>-

cpe:2.3:o:hachi:hv-04rd_pro_firmware:-:*:*:*:*:*:*:*

hachi>>hv-04rd_pro>>-

cpe:2.3:h:hachi:hv-04rd_pro:-:*:*:*:*:*:*:*

hachi>>hv-08rd_pro_firmware>>-

cpe:2.3:o:hachi:hv-08rd_pro_firmware:-:*:*:*:*:*:*:*

hachi>>hv-08rd_pro>>-

cpe:2.3:h:hachi:hv-08rd_pro:-:*:*:*:*:*:*:*

novuscctv>>nv-dvr1204_firmware>>-

cpe:2.3:o:novuscctv:nv-dvr1204_firmware:-:*:*:*:*:*:*:*

novuscctv>>nv-dvr1204>>-

cpe:2.3:h:novuscctv:nv-dvr1204:-:*:*:*:*:*:*:*

novuscctv>>nv-dvr1208_firmware>>-

cpe:2.3:o:novuscctv:nv-dvr1208_firmware:-:*:*:*:*:*:*:*

novuscctv>>nv-dvr1208>>-

cpe:2.3:h:novuscctv:nv-dvr1208:-:*:*:*:*:*:*:*

novuscctv>>nv-dvr1216_firmware>>-

cpe:2.3:o:novuscctv:nv-dvr1216_firmware:-:*:*:*:*:*:*:*

novuscctv>>nv-dvr1216>>-

cpe:2.3:h:novuscctv:nv-dvr1216:-:*:*:*:*:*:*:*

vsp>>tw-dvr604_firmware>>-

cpe:2.3:o:vsp:tw-dvr604_firmware:-:*:*:*:*:*:*:*

vsp>>tw-dvr604>>-

cpe:2.3:h:vsp:tw-dvr604:-:*:*:*:*:*:*:*

vsp>>tw-dvr616_firmware>>-

cpe:2.3:o:vsp:tw-dvr616_firmware:-:*:*:*:*:*:*:*

vsp>>tw-dvr616>>-

cpe:2.3:h:vsp:tw-dvr616:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-287	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securitybydefault.com/2013/01/12000-grabadores-de-video-expuestos-en.html	cve@mitre.org	Exploit Third Party Advisory
https://www.rapid7.com/db/modules/auxiliary/scanner/misc/dvr_config_disclosure	cve@mitre.org	Third Party Advisory
https://www.securityfocus.com/bid/57579/info	cve@mitre.org	Exploit Third Party Advisory VDB Entry