CVE-2013-6117

CVE-2013-6117 describes an authentication bypass vulnerability in Dahua DVR firmware versions 2.608.0000.0 and 2.608.GV00.0, allowing remote attackers to gain unauthorized access. This critical flaw, with a CVSS score of 7.5, permits attackers to obtain sensitive information including user credentials, change passwords, and clear logs by sending requests to TCP port 37777. The vulnerability is easily exploitable over the network with low attack complexity and no authentication required, leading to potential compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV, exploit code is publicly available via Metasploit and ExploitDB, and it has garnered significant community discussion and media coverage, indicating its widespread awareness and potential for exploitation.