Vulnerabilidades de Dahua
CVEs publicadas que afetam produtos de Dahua: 5 registro(s), com severidade, exploração e correções.
CVE-2026-29116
Alta · 8.7
CWE-617 10/06/2026
A vulnerability has been found in some Dahua products could allow an unauthenticated…
A vulnerability has been found in some Dahua products could
allow an unauthenticated remote attacker to send a specially crafted packet,
triggering an exception that causes the system to reboot unexpectedly,
resulting in a denial of service.
CVE-2026-29115
Média · 6.9
CWE-617 10/06/2026
A vulnerability has been found in some Dahua products could allow an authenticated…
A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpectedly, resulting in a denial of service.
CVE-2026-29114
Baixa · 2.3
CWE-538 10/06/2026
A vulnerability has been found in some Dahua products. An attacker may obtain the…
A vulnerability has been found in some Dahua products. An attacker
may obtain the device’s CA root certificate. If that CA is installed and
trusted on client systems, the attacker could issue fraudulent certificates
trusted by those clients and undermine the certificate trust chain.
CVE-2025-31703
Baixa · 2.4
CWE-305 18/03/2026
A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with…
A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's authentication mechanism to escalate privileges.
CVE-2025-31702
Média · 6.8
CWE-732 15/10/2025
Incorrect Permission Assignment for Critical Resource em Dahua IPC
A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are restricted to admin privileges, such as system-sensitive files through specific HTTP request. This may cause tampering with admin password, leading to privilege escalation. Systems with only admin account are not affected.