Unrated severityNVD Advisory· Published Mar 18, 2026· Updated Mar 18, 2026

CVE-2025-31703

Description

A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's authentication mechanism to escalate privileges.

Affected products

dahua/NVR2-4KS3v5
Range: Versions which Build time prior to 3rd March 2026
dahua/XVR1B16H-I/Tv5
Range: Versions which Build time prior to 3rd March 2026
dahua/XVR4232AN-I/Tv5
Range: Versions which Build time prior to 3rd March 2026

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/security-advisory-%E2%80%93-vulnerability-found-in-dahua-nvr-xvr-devicemitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000