Dahua

Vendor security scorecard – 1 CVEs in the selected period

Period: 30d 90d 6m 1y All
Risk 0
1
CVEs
0
Critical
0
High
0
KEV
0
PoC
0
Unpatched C/H
0.0%
Patch Rate
0.0%
Avg EPSS

Severity Breakdown

CRITICAL
0
HIGH
0
MEDIUM
0
LOW
1

Monthly CVE Trend

Affected Products (1)

Top Risky CVEs

CVE Summary Severity CVSS EPSS Priority Signals
CVE-2025-31703 This vulnerability in Dahua NVR/XVR devices allows unauthenticated privilege escalation through the serial port console by bypassing shell authentication mechanisms. Affected devices include Dahua NVR2-4KS3, XVR4232AN-I/T, and XVR1B16H-I/T models with build dates prior to March 3, 2026. An attacker with physical access to the device can gain a restricted shell and escalate privileges to access sensitive system functions, though the CVSS 2.4 score reflects the requirement for physical proximity and lack of data availability impact. LOW 2.4 0.0% 12
No patch

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy