Read the docs

Zhejiang Dahua Technology Co., Ltd.

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Zhejiang Dahua Technology Co., Ltd. records in CISA KEV

No Zhejiang Dahua Technology Co., Ltd. vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2024-12990 CVE-2024-13985 · GHSA-gqv2-wjhw-h44w

Dahua EIMS capture_handle.action RCE

Priority HIGH 65

A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capture_handle.action interface.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.15095 Published 2025-08-27 Fixed in 2240008 CWE-78
TI-2023-06677 CVE-2023-7309 · GHSA-44w2-cgm4-695p

Dahua Smart Park Integrated Management Platform Front-End Arbitrary File Upload

Priority MEDIUM 50

A path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform (also referred to as the Dahua Smart Campus Integrated Management Platform), affecting the SOAP-based GIS bitmap upload interfa…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00826 Published 2025-08-27 No fix listed CWE-22
TI-2025-24227 CVE-2025-34059 · GHSA-264g-23wx-93mv

Dahua Smart Cloud Gateway Registration Management Platform SQL Injection

Priority LOW 38

An SQL injection vulnerability exists in the Dahua Smart Cloud Gateway Registration Management Platform via the username parameter in the /index.php/User/doLogin endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00505 Published 2025-07-01 No fix listed CWE-200
Open these records in search →