CVE-2025-31703 LOW

CVE-2025-31703

Vendor Dahua
Product NVR2-4KS3
Weakness CWE-305
Published March 18, 2026
Last update March 18, 2026

CVSS base score

2.4/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

What the vulnerability does

01Description

A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's authentication mechanism to escalate privileges.

Key dates

02Disclosure timeline

March 18, 2026 CVE published
March 18, 2026 Record updated