CVE-2025-31700
Published: 23 July 2025
Summary
CVE-2025-31700 is a high-severity Classic Buffer Overflow (CWE-120) vulnerability in Dahuasecurity (inferred from references). Its CVSS base score is 8.1 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 24.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2025-31700 is a buffer overflow vulnerability (CWE-120) discovered in Dahua products. Published on 2025-07-23, it carries a CVSS v3.1 base score of 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating high severity with potential for significant impact on confidentiality, integrity, and availability.
The vulnerability can be exploited remotely by unauthenticated attackers over the network (AV:N) through the transmission of specially crafted malicious packets. Successful exploitation may result in service disruption, such as device crashes leading to denial-of-service (DoS), or remote code execution (RCE). While some Dahua devices implement protections like Address Space Layout Randomization (ASLR) that reduce the feasibility of RCE, DoS attacks remain viable due to the high attack complexity (AC:H) but lack of required privileges or user interaction.
Dahua has published an advisory detailing the vulnerability at https://www.dahuasecurity.com/aboutUs/trustedCenter/details/775, which security practitioners should consult for specific mitigation recommendations, patch availability, or workaround guidance.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-22420
Vulnerability details
A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., crashes) or remote code execution (RCE). Some devices may have deployed protection mechanisms such…
more
as Address Space Layout Randomization (ASLR), which reduces the likelihood of successful RCE exploitation. However, denial-of-service (DoS) attacks remain a concern.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in network-exposed Dahua device allows unauthenticated remote exploitation via crafted packets, directly matching T1190 for initial access/RCE/DoS on public-facing applications.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Timely flaw remediation through applying Dahua patches directly eliminates the buffer overflow vulnerability preventing both DoS and RCE exploitation.
Information input validation checks specially crafted malicious packets to prevent buffer overflows that cause service crashes or RCE.
Denial-of-service protection mitigates the service disruption and crashes from buffer overflow exploitation via malicious packets.