VULNERABILITY INTELLIGENCE
CVE-2025-31700
CVSS score8.1 HIGH
EPSS probability0.91%
CISA KEVNot currently listed
Published2025-07-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., crashes) or remote code execution (RCE). Some devices may have deployed protection mechanisms such as Address Space Layout Randomization (ASLR), which reduces the likelihood of successful RCE exploitation. However, denial-of-service (DoS) attacks remain a concern.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-120