What’s Vulnerable › Vulnerabilities

CVE-2013-1391

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 76.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-10-30 · updated 2026-06-16
• Weakness: CWE-287

Description

Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR systems allows a remote attacker to retrieve the device configuration.

Affected products

• Capturecctv Cdr 0410Ve Firmware: all versions
• Capturecctv Cdr 0820Vde Firmware: all versions
• HACHI Hv-04Rd Pro Firmware: all versions
• HACHI Hv-08Rd Pro Firmware: all versions
• Huntcctv Dr6-704A4H Firmware: all versions
• Huntcctv Dr6-708A4H Firmware: all versions
• Huntcctv Dr6-7316A4H Firmware: all versions
• Huntcctv Dr6-7316A4Hl Firmware: all versions
• Huntcctv Dvr-04Ch Firmware: all versions
• Huntcctv Dvr-04Nc Firmware: all versions
• Huntcctv Dvr-08Ch Firmware: all versions
• Huntcctv Dvr-08Nc Firmware: all versions
• Huntcctv Dvr-16Ch Firmware: all versions
• Huntcctv Hdr-04Kd Firmware: all versions
• Huntcctv Hdr-08Kd Firmware: all versions
• Novuscctv Nv-Dvr1204 Firmware: all versions
• Novuscctv Nv-Dvr1208 Firmware: all versions
• Novuscctv Nv-Dvr1216 Firmware: all versions
• Vsp Tw-Dvr604 Firmware: all versions
• Vsp Tw-Dvr616 Firmware: all versions

References

• http://www.securitybydefault.com/2013/01/12000-grabadores-de-video-expuestos-en.html
• https://www.rapid7.com/db/modules/auxiliary/scanner/misc/dvr_config_disclosure
• https://www.securityfocus.com/bid/57579/info
• http://www.securitybydefault.com/2013/01/12000-grabadores-de-video-expuestos-en.html
• https://www.rapid7.com/db/modules/auxiliary/scanner/misc/dvr_config_disclosure
• https://www.securityfocus.com/bid/57579/info

Get alerted when CVE-2013-1391 or the next vulnerability affects your stack