{"id":"CVE-2025-31702","aliases":["EUVD-2025-34517","GHSA-5x9h-fg8g-wjh2"],"status":"published","title":"A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with...","description":"A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are restricted to admin privileges, such as system-sensitive files through specific HTTP request. This may cause tampering with admin password, leading to privilege escalation. Systems with only admin account are not affected.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00475,"percentile":0.41316,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-732"],"published":"2025-10-15T05:53:35Z","modified":"2026-10-18T21:10:00Z","exploits":[{"source":"pocgithub","id":"itres-labs/CVE-2025-31702","title":"itres-labs/CVE-2025-31702","date":"2025-10-29","url":"https://github.com/itres-labs/CVE-2025-31702"}],"products":[{"vendor":"dahua","product":"ipc"},{"vendor":"dahua","product":"sd"}],"references":[{"url":"https://www.dahuasecurity.com/aboutUs/trustedCenter/details/777"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31702"},{"url":"https://github.com/advisories/GHSA-5x9h-fg8g-wjh2"}],"sources":{"cve":[{"id":"CVE-2025-31702","description":"A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are restricted to admin privileges, such as system-sensitive files through specific HTTP request. This may cause tampering with admin password, leading to privilege escalation. Systems with only admin account are not affected.","status":"published","published":"2025-10-15T05:53:35.664Z","modified":"2025-10-15T13:25:09.791Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:32:44.424933Z"}],"euvd":[{"id":"EUVD-2025-34517","description":"A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are restricted to admin privileges, such as system-sensitive files through specific HTTP request. This may cause tampering with admin password, leading to privilege escalation. Systems with only admin account are not affected.","status":"published","published":"2025-10-15T05:53:35Z","modified":"2025-10-15T13:25:09Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:31:31.584227Z"}],"ghsa":[{"id":"GHSA-5x9h-fg8g-wjh2","title":"A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with...","description":"A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are restricted to admin privileges, such as system-sensitive files through specific HTTP request. This may cause tampering with admin password, leading to privilege escalation. Systems with only admin account are not affected.","status":"published","published":"2025-10-15T06:31:10Z","modified":"2025-10-15T06:31:15Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T15:03:59.061881Z"}],"nvd":[{"id":"CVE-2025-31702","description":"A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are restricted to admin privileges, such as system-sensitive files through specific HTTP request. This may cause tampering with admin password, leading to privilege escalation. Systems with only admin account are not affected.","status":"published","published":"2025-10-15T06:15:42.907Z","modified":"2026-10-18T21:10:00.12Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:11:38.17237Z"}]}}