PT-2025-34942 · Dahua · Dahua Eims

Maodaner Security · Published 2025-08-27 · Updated 2025-08-27 · CVE-2024-13985

Positive Technologies · (AI Summary)

CVSS v4.0

10

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions:

Dahua EIMS versions prior to 2240008

Description:

A command injection flaw in Dahua EIMS allows unauthenticated remote attackers to execute arbitrary system commands. This is due to improper input validation in the `captureCommand` parameter of the `/capture handle.action` API endpoint. Crafted HTTP requests can inject OS-level commands, potentially leading to full system compromise.

Recommendations:

Update Dahua EIMS to version 2240008 or later.

As a temporary workaround, restrict access to the `/capture handle.action` API endpoint.

Sanitize all input to the `captureCommand` parameter.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-13985

Affected Products

Dahua Eims

References · 11

• 🔥 https://github.com/ahisec/nuclei-tps/blob/main/http/vulnerabilities/dahua/dahua-eims-capture-handle-rce.yaml · Exploit
• 🔥 https://cn-sec.com/archives/2554372.html · Exploit
• 🔥 https://blog.csdn.net/weixin_43567873/article/details/136636198 · Exploit
• https://support.dahuatech.com/bulletin/info?IsDpValue=APKncD%2FBd6zIq4O2BUpuhjg6hGbLYAQKuf5hnmPaK9M%3D · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-13985 · Security Note
• https://s4e.io/tools/dahua-eims-remote-code-execution · Note
• https://vulncheck.com/advisories/dahua-eims-rce · Note
• https://cnvd.org.cn/flaw/show/CNVD-2024-17054 · Note
• https://twitter.com/CVEnew/status/1960822218817962206 · Twitter Post
• https://t.me/CVEtracker/31081 · Telegram Post
• https://pentest-tools.com/vulnerabilities-exploits/dahua-eims-remote-command-execution_23961 · Note