Vulnerability in Dahua Nvr2-4ks3
CVE-2025-31703
A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's authentication mechanism to escalate privileges.
EPSS: 0.002 (14.1th percentile) — read the EPSS interpretation.
Affected products
- Dahua Nvr2-4ks3 — versions Versions which Build time prior to 3rd March 2026
- Dahua Xvr1b16h-i/t — versions Versions which Build time prior to 3rd March 2026
- Dahua Xvr4232an-i/t — versions Versions which Build time prior to 3rd March 2026