CVE-2025-31701
Published: 23 July 2025
Summary
CVE-2025-31701 is a high-severity Classic Buffer Overflow (CWE-120) vulnerability in Dahuasecurity (inferred from references). Its CVSS base score is 8.1 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 26.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2025-31701 is a buffer overflow vulnerability (CWE-120) affecting Dahua products, published on 2025-07-23 with a CVSS v3.1 base score of 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). The flaw allows attackers to exploit it by sending specially crafted malicious packets over the network, potentially leading to service crashes or remote code execution (RCE).
Remote, unauthenticated attackers can exploit this vulnerability due to its network accessibility and lack of privilege requirements, though it demands high attack complexity. Successful exploitation could result in denial-of-service (DoS) disruptions, such as device crashes, or RCE with high impacts on confidentiality, integrity, and availability. Some affected devices implement protections like Address Space Layout Randomization (ASLR), which may hinder reliable RCE but does not prevent DoS attacks.
For mitigation details, refer to the official Dahua Security Trusted Center advisory at https://www.dahuasecurity.com/aboutUs/trustedCenter/details/775.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-22419
Vulnerability details
A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., crashes) or remote code execution (RCE). Some devices may have deployed protection mechanisms such…
more
as Address Space Layout Randomization (ASLR), which reduces the likelihood of successful RCE exploitation. However, denial-of-service (DoS) attacks remain a concern.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in network-accessible Dahua service directly enables remote unauthenticated exploitation of a public-facing application for RCE or DoS.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Validates specially crafted malicious network packets to prevent buffer overflows leading to crashes or RCE.
Requires timely remediation of the identified buffer overflow flaw through patching as per the Dahua advisory.
Implements denial-of-service protections to mitigate service disruptions from buffer overflow exploits even when RCE is hindered by ASLR.