PT-2025-30545 · Dahua · Dahua Ip Products

Published 2025-07-23 · Updated 2026-03-04 · CVE-2025-31700

Positive Technologies · (AI Summary)

CVSS v3.1

8.1

High

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dahua products (affected versions not specified)

Description A buffer overflow issue exists in Dahua products. Attackers can exploit this by sending specially crafted malicious packets, potentially leading to service disruption, such as crashes, or remote code execution (RCE). Some devices may have Address Space Layout Randomization (ASLR) deployed as a protective measure, which can reduce the likelihood of successful RCE exploitation. However, denial-of-service (DoS) attacks remain a concern.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2025-10934

CVE-2025-31700

Affected Products

Dahua Ip Products

References · 17

• https://nvd.nist.gov/vuln/detail/CVE-2025-31700 · Security Note
• https://bdu.fstec.ru/vul/2025-10934 · Security Note
• https://twitter.com/VulmonFeeds/status/1947927124028842117 · Twitter Post
• https://twitter.com/CVEnew/status/1947919999995167120 · Twitter Post
• https://t.me/CVEtracker/28473 · Telegram Post
• https://twitter.com/fridaysecurity/status/1948174936063062124 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1948201920314921268 · Twitter Post
• https://t.me/true_secator/7292 · Telegram Post
• https://dahuasecurity.com/aboutUs/trustedCenter/details/775 · Note
• https://t.me/cveNotify/129952 · Telegram Post
• https://twitter.com/grok/status/2029007872407875955 · Twitter Post
• https://twitter.com/dCypherIO/status/1950904320246919176 · Twitter Post
• https://t.me/pentestingnews/65058 · Telegram Post
• https://twitter.com/Komodosec/status/1961852811848843640 · Twitter Post
• https://twitter.com/Andrewkek77/status/1950560238039453855 · Twitter Post