CVE-2025-31700 - CVE House
Back to Database
Status published High CVE-2025-31700

A vulnerability has been found in Dahua products. Attackers could exploit...

Vulnerability Description

A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., crashes) or remote code execution (RCE). Some devices may have deployed protection mechanisms such as Address Space Layout Randomization (ASLR), which reduces the likelihood of successful RCE exploitation. However, denial-of-service (DoS) attacks remain a concern.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-31700

Credits & Attribution

No credits recorded in the NVD database.

References

More from Dahua

View All →
CVE-2025-31702
A vulnerability exists in certain Dahua embedded products. Third-party malicious...
Medium 6.8
CVE-2025-31701
A vulnerability has been found in Dahua products. Attackers could exploit...
High 8.1
CVE-2024-39950
A vulnerability has been found in Dahua products. Attackers can...
High 8.6
CVE-2024-39949
A vulnerability has been found in Dahua products. Attackers can send...
High 7.5
CVE-2024-39948
A vulnerability has been found in Dahua products. Attackers can send...
High 7.5

Affected Vendor

Affected Software

IPC, SD
Vulnerable Versions:
Affected products include certain models from the IPC-1XXX, IPC-2XXX, IPC-WX, and IPC-ECXX series, and limited to versions which build time before April 16, 2025., Affected products include certain models from the SD3A, SD2A, SD3D, SDT2A, and SD2C series, and limited to versions which build time before April 16, 2025.

Timeline

Official Publish: July 23rd, 2025
Last Modified: July 23rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.