CVE-2025-31703
Privilege Escalation via Serial Port Restricted Shell in Dahua NVR/XVR Devices
A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's authentication mechanism to escalate privileges.
CVSS 4.0 · 2.4 Low
EPSS < 1%
KEV · Not listed
Vendors
Products