High severity · published Jul 23, 2025
CVE-2025-31700
A vulnerability has been found in Dahua products
8.1
CVSS
0.9%
EPSS
No
On KEV
Description
A vulnerability has been found in Dahua products.
Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., crashes) or remote code execution (RCE). Some devices may have deployed protection mechanisms such as Address Space Layout Randomization (ASLR), which reduces the likelihood of successful RCE exploitation. However, denial-of-service (DoS) attacks remain a concern.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
IPC · Dahua
Affected products include certain models from the IPC-1XXX, IPC-2XXX, IPC-WX, and IPC-ECXX series, and limited to versions which build time before April 16, 2025. · source: vendor
SD
SD · Dahua
Affected products include certain models from the SD3A, SD2A, SD3D, SDT2A, and SD2C series, and limited to versions which build time before April 16, 2025. · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-31700
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-31700
www.dahuasecurity.com
https://www.dahuasecurity.com/aboutUs/trustedCenter/details/775
More from IPC
8.1
CVE-2025-31701
A vulnerability has been found in Dahua products
6.8
CVE-2025-31702
A vulnerability exists in certain Dahua embedded products
2.3
CVE-2026-29114
A vulnerability has been found in some Dahua products
