CVE-2025-31703: Dahua NVR2-4ks3

Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's authentication mechanism to escalate privileges.

Affected products

• Dahua NVR2-4ks3
• Dahua XVR1B16H-I/t
• Dahua XVR4232AN-I/t

Published 2026-03-18. Last modified 2026-06-17.