TI-2024-12990 Aliases CVE-2024-13985 GHSA-gqv2-wjhw-h44w

Dahua EIMS capture_handle.action RCE

HIGH 65CWE-78Published 2025-08-27 · Updated 2026-05-15

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capture_handle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without sanitization or authentication. By sending crafted HTTP requests, attackers can inject OS-level commands that are executed on the server, leading to full system compromise. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-04-06 UTC.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.15095 96th percentileScored 2026-11-07

Public exploit Yes 3 exploit referencesTagged by the CNA

Fix Fixed EIMS (Zhejiang Dahua Technology Co., Ltd.): 2240008

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Zhejiang Dahua Technology Co., Ltd.	EIMS	before 2240008	2240008	Patch available	CNA

EIMS VendorZhejiang Dahua Technology Co., Ltd. Affected before 2240008 Fixed in 2240008 Patch available CNA

Remediation

Fix · CNA EIMS (Zhejiang Dahua Technology Co., Ltd.) Fixed in 2240008

Timeline

2026-10-02 Threatist record created from CVE-2024-13985
2026-10-03 Alias added: GHSA-gqv2-wjhw-h44w

References

Exploit 3

Advisory 4

TI-2023-06677 Dahua Smart Park Integrated Management Platform Front-End Arbitrary File Upload CVSS 4.0CRITICAL 10.0
TI-2025-24227 Dahua Smart Cloud Gateway Registration Management Platform SQL Injection CVSS 4.0HIGH 8.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences