Login Request a demo
Low severity · published Mar 18, 2026
CVE-2025-31703
A vulnerability found in Dahua NVR/XVR device
2.4
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's authentication mechanism to escalate privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NV
NVR2-4KS3 · dahua
Versions which Build time prior to 3rd March 2026 · source: vendor
XV
XVR1B16H-I/T · dahua
Versions which Build time prior to 3rd March 2026 · source: vendor
XV
XVR4232AN-I/T · dahua
Versions which Build time prior to 3rd March 2026 · source: vendor
Affected product
NV
NVR2-4KS3
dahua
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-31703
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-31703
www.dahuasecurity.com
https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/security-advisory-%E2%80%93-vulnerability-found-in-dahua-nvr-xvr-device