Detections
Analytics
CVE-2025-31702
medium
Description
A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are restricted to admin privileges, such as system-sensitive files through specific HTTP request. This may cause tampering with admin password, leading to privilege escalation. Systems with only admin account are not affected.
References
https://www.databreachtoday.com/critical-flaws-found-in-dahua-cameras-a-29093
https://www.dahuasecurity.com/aboutUs/trustedCenter/details/777