Back to KEVs

CVE-2024-13985

Dahua EIMS capture_handle.action RCE

Basic Information

CVE State
PUBLISHED
Reserved Date
August 27, 2025
Published Date
August 27, 2025
Last Updated
May 15, 2026
Vendor
Zhejiang Dahua Technology Co., Ltd.
Product
EIMS
Description
A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capture_handle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without sanitization or authentication. By sending crafted HTTP requests, attackers can inject OS-level commands that are executed on the server, leading to full system compromise. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-04-06 UTC.

CVSS Scores

CVSS v4.0

10.0 - CRITICAL

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC Information

Exploitation
none
Automatable
Yes
Technical Impact
total

Exploit Status

Exploited in the Wild
Yes (2026-03-06 00:00:00 UTC) Source

References

https://support.dahuatech.com/bulletin/info?IsDpValue=APKncD%2FBd6zIq4O2BUpuhjg6hGbLYAQKuf5hnmPaK9M%3D https://cn-sec.com/archives/2554372.html https://blog.csdn.net/weixin_43567873/article/details/136636198 https://github.com/ahisec/nuclei-tps/blob/main/http/vulnerabilities/dahua/dahua-eims-capture-handle-rce.yaml https://s4e.io/tools/dahua-eims-remote-code-execution https://pentest-tools.com/vulnerabilities-exploits/dahua-eims-remote-command-execution_23961 https://www.cnvd.org.cn/flaw/show/CNVD-2024-17054 https://www.vulncheck.com/advisories/dahua-eims-rce

Known Exploited Vulnerability Information

Source Added Date
The Shadowserver (via CIRCL) 2026-03-06 00:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel