VULNERABILITY INTELLIGENCE
CVE-2025-31703
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-03-18
Last modified2026-06-17
Description
A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's authentication mechanism to escalate privileges.
Weakness classification
- cybersecurity@dahuatech.com: CWE-305