cbcvebase.

Zhejiang Dahua Technology Co Ltd Eims vulnerabilities

1 known vulnerability affecting zhejiang_dahua_technology_co_ltd/eims.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2024-13985P1CRITICALCVSS 10.0Exploitedfixed in 22400082025-08-27
CVE-2024-13985 [CRITICAL] CWE-78 CVE-2024-13985: A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated rem A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capture_handle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without sanitization or authentication. By sending crafted H
nvd
Zhejiang Dahua Technology Co Ltd Eims vulnerabilities | cvebase