PT-2025-34942 · Dahua · Dahua Eims

Maodaner Security · Published 2025-08-27 · Updated 2025-08-27 · CVE-2024-13985

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions: Dahua EIMS versions prior to 2240008

Description: A command injection flaw in Dahua EIMS allows unauthenticated remote attackers to execute arbitrary system commands. This is due to improper input validation in the captureCommand parameter of the /capture handle.action API endpoint. Crafted HTTP requests can inject OS-level commands, potentially leading to full system compromise.

Recommendations: Update Dahua EIMS to version 2240008 or later. As a temporary workaround, restrict access to the /capture handle.action API endpoint. Sanitize all input to the captureCommand parameter.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-13985

Affected Products

Dahua Eims

References · 11

• 🔥 https://github.com/ahisec/nuclei-tps/blob/main/http/vulnerabilities/dahua/dahua-eims-capture-handle-rce.yaml · Exploit
• 🔥 https://blog.csdn.net/weixin_43567873/article/details/136636198 · Exploit
• 🔥 https://cn-sec.com/archives/2554372.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-13985 · Security Note
• https://support.dahuatech.com/bulletin/info?IsDpValue=APKncD%2FBd6zIq4O2BUpuhjg6hGbLYAQKuf5hnmPaK9M%3D · Vendor Advisory
• https://vulncheck.com/advisories/dahua-eims-rce · Note
• https://cnvd.org.cn/flaw/show/CNVD-2024-17054 · Note
• https://t.me/CVEtracker/31081 · Telegram Post
• https://twitter.com/CVEnew/status/1960822218817962206 · Twitter Post
• https://pentest-tools.com/vulnerabilities-exploits/dahua-eims-remote-command-execution_23961 · Note
• https://s4e.io/tools/dahua-eims-remote-code-execution · Note