Description (CNA)
A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's authentication mechanism to escalate privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| dahua / NVR2-4KS3 | affected Versions which Build time prior to 3rd March 2026 |
| dahua / XVR4232AN-I/T | affected Versions which Build time prior to 3rd March 2026 |
| dahua / XVR1B16H-I/T | affected Versions which Build time prior to 3rd March 2026 |
CWE
CWE-305
References
ADP enrichment
No English description supplied.
No references supplied.