Main
Vulnerability Database
Exploits
ID:1378 - Exploit for Use of hard-coded credentials in Ds-2cd7153-e and Hikvision DVR/NVR Firmware - CVE-2013-4976
ID:1378 - Exploit for Use of hard-coded credentials in Ds-2cd7153-e and Hikvision DVR/NVR Firmware - CVE-2013-4976
Published: March 18, 2020
Vulnerability identifier: #VU9530
Vulnerability risk: Low
CVE-ID: CVE-2013-4976
CWE-ID: CWE-798
Exploitation vector: Remote access
Vulnerable software:
Ds-2cd7153-e
Hikvision DVR/NVR Firmware
Ds-2cd7153-e
Hikvision DVR/NVR Firmware
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to bypass security restrictions on the target system.
The weakness exists due to use of hard-coded credentials (even if the built-in anonymous user account was explicitly disabled). A remote attacker can use hard-coded credentials to bypass the anonymous user authentication.
The weakness exists due to use of hard-coded credentials (even if the built-in anonymous user account was explicitly disabled). A remote attacker can use hard-coded credentials to bypass the anonymous user authentication.
Remediation
Update to the latest firmware version.