CVE-2013-3614

CVE-2013-3614 describes a vulnerability in Dahua DVR appliances where a small maximum password length facilitates brute-force attacks, allowing remote attackers to gain unauthorized access. This vulnerability carries a critical CVSS score of 9.3, indicating a network-based attack with medium complexity that can lead to complete compromise of confidentiality, integrity, and availability. While not listed in CISA KEV, an authentication bypass exploit for specific Dahua DVR versions is available on ExploitDB and integrated into Metasploit, suggesting potential for exploitation despite limited community discussion or media coverage.