A vulnerability exists in certain Dahua embedded products. Third-party malicious...

6.8 CVSS

Vulnerability Description

A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are restricted to admin privileges, such as system-sensitive files through specific HTTP request. This may cause tampering with admin password, leading to privilege escalation. Systems with only admin account are not affected.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-31702

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.dahuasecurity.com/aboutUs/trustedCenter/details/777

More from Dahua

View All →

CVE-2025-31701

A vulnerability has been found in Dahua products. Attackers could exploit...

High 8.1

CVE-2025-31700

A vulnerability has been found in Dahua products. Attackers could exploit...

High 8.1

CVE-2024-39950

A vulnerability has been found in Dahua products. Attackers can...

High 8.6

CVE-2024-39949

A vulnerability has been found in Dahua products. Attackers can send...

High 7.5

CVE-2024-39948

A vulnerability has been found in Dahua products. Attackers can send...

High 7.5

Affected Vendor

Dahua

View all reports →

Affected Software

IPC, SD

Vulnerable Versions:

Affected products include certain models from the IPC-1XXX, IPC-2XXX, IPC-WX, and IPC-ECXX series, and limited to versions which build time prior to 1st July 2025 (not including 1st July 2025)., Affected products include certain models from the SD3A, SD2A, SD3D, SDT2A, and SD2C series, and limited to versions which build time prior to 1st July 2025 (not including 1st July 2025).