CVE-2013-4734

dasdec_mkuser on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 generates predictable passwords, which might make it easier for attackers to obtain non-administrative access via unspecified vectors.

• CWE-330

• http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdfVendor Advisory
• http://www.kb.cert.org/vuls/id/662676US Government Resource
• http://www.kb.cert.org/vuls/id/AAMN-98MU7HUS Government Resource
• http://www.kb.cert.org/vuls/id/AAMN-98MUK2US Government Resource
• http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdfVendor Advisory
• http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdfVendor Advisory
• http://www.kb.cert.org/vuls/id/662676US Government Resource
• http://www.kb.cert.org/vuls/id/AAMN-98MU7HUS Government Resource
• http://www.kb.cert.org/vuls/id/AAMN-98MUK2US Government Resource
• http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdfVendor Advisory

Published

Jun 30, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4728DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b…
• CVE-2013-4729import.php in phpMyAdmin 4.x before 4.0.4.1 does not properl…
• CVE-2013-4730Buffer overflow in PCMan's FTP Server 2.0.7 allows remote at…
• CVE-2013-4731ajax.cgi in the web interface on the Choice Wireless Green P…
• CVE-2013-4732The administrative web server on the Digital Alert Systems D…
• CVE-2013-4733The web server on the Digital Alert Systems DASDEC EAS devic…7.5
• CVE-2013-4735The Digital Alert Systems DASDEC EAS device before 2.0-2 and…
• CVE-2013-4736Multiple integer overflows in the JPEG engine drivers in the…
• CVE-2013-4737The CONFIG_STRICT_MEMORY_RWX implementation for the Linux ke…
• CVE-2013-4738Multiple stack-based buffer overflows in the MSM camera driv…
• CVE-2013-4739The MSM camera driver for the Linux kernel 3.x, as used in Q…
• CVE-2013-4740goodix_tool.c in the Goodix gt915 touchscreen driver for the…