Vulnerability in Dahua Nvr2-4ks3
CVE-2025-31703
A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's authentication mechanism to escalate privileges.
Published · last modified .
EPSS exploit prediction
EPSS: 0.002 (12.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 12th percentile — 12.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Dahua Nvr2-4ks3 — versions Versions which Build time prior to 3rd March 2026
- Dahua Xvr1b16h-I/t — versions Versions which Build time prior to 3rd March 2026
- Dahua Xvr4232an-I/t — versions Versions which Build time prior to 3rd March 2026