CVE-2025-31702 – Dahua Embedded Products HTTP Request Privilege Escalation Vulnerability

CVE ID : CVE-2025-31702

Published : Oct. 15, 2025, 6:15 a.m. | 24 minutes ago

Description : A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are restricted to admin privileges, such as system-sensitive files through specific HTTP request. This may cause tampering with admin password, leading to privilege escalation. Systems with only admin account are not affected.

Severity: 6.8 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…