ID:12219 - Exploit for Improper access control in Dahua Technology products - CVE-2025-31702

Main Vulnerability Database Exploits ID:12219 - Exploit for Improper access control in Dahua Technology products - CVE-2025-31702

ID:12219 - Exploit for Improper access control in Dahua Technology products - CVE-2025-31702

Published: January 4, 2026

Vulnerability identifier: #VU117305

Vulnerability risk: Medium

CVE-ID: CVE-2025-31702

CWE-ID: CWE-284

Exploitation vector: Remote access

Vulnerable software:
IPC-1XXX Series
IPC-2XXX Series
IPC-WX Series
IPC-ECXX Series
SD3A Series
SD2A Series
SD3D Series
SDT2A Series
SD2C Series
TPC-AEBF5201 Series
TPC-CA Series

Link to public exploit:

https://github.com/itres-labs/CVE-2025-31702

Vulnerability description

The vulnerability allows a remote user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote user can send a specially crafted HTTP request to bypass implemented security restrictions and access system-sensitive files or alter device configuration.

Remediation

Install updates from vendor's website.