Dahua
Number 697 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: Dahua, Dahua Technologies, Dahua Technology, Zhejiang Dahua Technology, dahua
Total vulnerabilities
31
Critical
3
High
8
Known Exploited
0
Exploit available
6
Visible in Bangladesh
13,844
Services seen by internet scanning
Network, no login needed
57.1%
Of 21 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 5 | 1 | 1 | 1 | 2 | 0 |
| 2025 | 7 | 2 | 3 | 2 | 0 | 0 |
| 2024 | 7 | 0 | 4 | 3 | 0 | 0 |
| 2023 | 2 | 0 | 0 | 1 | 1 | 0 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2019 | 5 | 0 | 0 | 0 | 0 | 5 |
| 2018 | 2 | 0 | 0 | 0 | 0 | 2 |
| 2017 | 3 | 0 | 0 | 0 | 0 | 3 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X | 5 | 0 |
| NVR4XXX | 5 | 2 |
| IPC | 4 | 2 |
| Dahua IP Camera and IP PTZ IPC-HFW1XXX, IPC-HDW1XXX, IPC-HDBW1XXX, IPC-HFW2XXX, IPC-HDW2XXX, IPC-HDBW2XXX, IPC-HFW4XXX, IPC-HDW4XXX, IPC-HDBW4XXX, IPC-HF5XXX, IPC-HFW5XXX, IPC-HDW5XXX, IPC-HDBW5XXX, IPC-HF8XXX, IPC-HFW8XXX, IPC-HDBW8XXX, IPC-EBW8XXX, IPC-PFW8xxx, IPC-PDBW8xxx, IPC-HUM8xxx, PSD8xxxx, DH-SD2XXXXX, DH-SD4XXXXX, DH-SD5XXXXX, DH-SD6XXXXX | 1 | 0 |
| EIMS | 1 | 1 |
| IP Camera | 1 | 0 |
| IPC-HDW4300S\NVR11HS\IPC-HFW4X00\IPC-HDW4X00\IPC-HDBW4X00\IPC-HF5X00\IPC-HFW5X00\IPC-HDW5X00\IPC-HDBW5X00\NVR11HS | 1 | 0 |
| IPC-HFW1200S | 1 | 0 |
| IPC-HX8XXX and NVR4XXX | 1 | 1 |
| IPC/SD | 1 | 0 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Improper Input Validation | 3 | 3 |
| Memory Corruption | 3 | 3 |
| Command Injection | 2 | 2 |
| Unrestricted File Upload | 2 | 1 |
| Authentication bypass by primary weakness | 1 | 0 |
| Improper Check or Handling of Exceptional Conditions | 1 | 0 |
| Incorrect Permission Assignment for Critical Resource | 1 | 0 |
| Insertion of sensitive information into Externally-Accessible file or directory | 1 | 0 |
| Path Traversal: '../filedir' | 1 | 0 |
| Reachable assertion | 1 | 0 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2025-31704 | Dahua Intelligent Connection Center command injection | Critical | 1.4% | |
| CVE-2026-29116 | Dahua IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC vulnerability | High | 0.6% | |
| CVE-2026-29115 | Dahua IPC/SD vulnerability | Medium | 0.5% | |
| CVE-2026-29114 | Dahua IPC vulnerability | Low | 0.2% | |
| CVE-2025-31703 | dahua NVR2-4KS3 vulnerability | Low | 0.3% | |
| CVE-2025-31702 | Dahua IPC vulnerability | Medium | 0.5% | |
| CVE-2024-13985 | Dahua EIMS capture_handle.action RCE | Critical | 15.1% | |
| CVE-2023-7309 | Dahua Smart Park Integrated Management Platform Front-End Arbitrary File Upload | Critical | 0.8% | |
| CVE-2025-31701 | Dahua IPC: Memory Corruption | High | 0.9% | |
| CVE-2025-31700 | Dahua IPC: Memory Corruption | High | 1.1% |