# CVEs published 2013-09-17

12 CVEs were published on September 17, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-2788](https://cve.now/CVE-2013-2788.md): The DNP3 Slave service in SUBNET Solutions SubSTATION Server 2.7.0033 and 2.8.0106 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2013-3612](https://cve.now/CVE-2013-3612.md): Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier… (no CVSS)
- [CVE-2013-3613](https://cve.now/CVE-2013-3613.md): Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors… (no CVSS)
- [CVE-2013-3614](https://cve.now/CVE-2013-3614.md): Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a… (no CVSS)
- [CVE-2013-3615](https://cve.now/CVE-2013-3615.md): Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to… (no CVSS)
- [CVE-2013-5709](https://cve.now/CVE-2013-5709.md): The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a… (no CVSS)
- [CVE-2013-5754](https://cve.now/CVE-2013-5754.md): The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master… (no CVSS)
- [CVE-2012-4067](https://cve.now/CVE-2012-4067.md): Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted… (no CVSS)
- [CVE-2013-2296](https://cve.now/CVE-2013-2296.md): Walrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus, SetBucketLoggingStatus, and… (no CVSS)
- [CVE-2013-2297](https://cve.now/CVE-2013-2297.md): Eucalyptus EuStore sets a blank root password in the default configuration of EMI 3868652036, EMI 0400376721, EMI 2425352071, and EMI… (no CVSS)
- [CVE-2013-4766](https://cve.now/CVE-2013-4766.md): The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster… (no CVSS, org.jclouds.api:eucalyptus)
- [CVE-2013-5711](https://cve.now/CVE-2013-5711.md): Cross-site scripting (XSS) vulnerability in admin/walkthrough/walkthrough.php in the Design Approval System plugin before 3.7 for… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-09-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.