CVE-2025-31702

Name of the Vulnerable Software and Affected Versions Dahua embedded products (affected versions not specified)

Description An improper permission assignment for a critical resource allows a remote attacker with normal user credentials to access data restricted to administrator privileges via a specific HTTP request. This flaw enables access to system-sensitive files and may allow the attacker to tamper with the administrator password, resulting in privilege escalation. Systems configured with only an administrator account are not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.