Dahua DVR Appliances: Hardcoded Password and Backdoor Vulnerability

CVE-2013-3612

Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving (a) ActiveX, (b) a standalone client, or (c) unknown other vectors.

Learn more about our Web Application Penetration Testing UK.