Skip to content
CVE PROGRAM SOURCE RECORD2.4 Low

CVE-2025-31703

A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and by

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dahua

Description

A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's authentication mechanism to escalate privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

dahua NVR2-4KS3

Default version status: unaffected

  • Versions which Build time prior to 3rd March 2026affected

dahua XVR4232AN-I/T

Default version status: unaffected

  • Versions which Build time prior to 3rd March 2026affected

dahua XVR1B16H-I/T

Default version status: unaffected

  • Versions which Build time prior to 3rd March 2026affected

References