DDahua

Products

Exploited and recent CVEs

• CVE-2025-31704 Critical 9.8 Dahua Intelligent Connection Center command injection 1.4%
• CVE-2026-29116 High 8.7 A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpe 0.6%
• CVE-2026-29115 Medium 6.9 A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpect 0.5%
• CVE-2026-29114 Low 2.3 A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client systems, the attacker could issue fraudule 0.2%
• CVE-2025-31703 Low 2.4 A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's a 0.3%
• CVE-2025-31703 Low 2.4 A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's a 0.3%
• CVE-2025-31703 Low 2.4 A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's a 0.3%
• CVE-2025-31702 Medium 6.8 A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are restric 0.5%
• CVE-2025-31702 Medium 6.8 A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are restric 0.5%
• CVE-2025-31701 High 8.1 A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., 0.9%
• CVE-2025-31701 High 8.1 A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., 0.9%
• CVE-2025-31700 High 8.1 A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., 0.9%
• CVE-2025-31700 High 8.1 A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., 0.9%
• CVE-2024-13130 Medium 4.3 Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal 0.6%
• CVE-2024-13130 Medium 4.3 Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal 0.6%
• CVE-2024-13130 Medium 4.3 Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal 0.6%
• CVE-2024-13130 Medium 4.3 Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal 0.6%
• CVE-2024-39950 High 8.6 A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization. 0.5%
• CVE-2024-39949 High 7.5 A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. 0.6%
• CVE-2024-39948 High 7.5 A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. 0.6%
• CVE-2024-39947 Medium 6.5 A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, 0.5%
• CVE-2024-39946 Medium 6.0 A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, 0.4%
• CVE-2024-39945 Medium 4.9 A vulnerability has been found in Dahua products.  After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilitie 0.5%
• CVE-2024-39944 High 7.5 A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. 0.6%
• CVE-2023-3836 Medium 6.3 Dahua Smart Park Management unrestricted upload 73.7%
• CVE-2023-3121 Low 3.5 Dahua Smart Parking Management image server-side request forgery 0.5%