Zhejiang Dahua Technology Co. Known Exploited Vulnerabilities
Evidence-backed KEV intelligence for Zhejiang Dahua Technology Co. products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.
Total KEVs
3
In CISA KEV
0
Beyond CISA KEV
3
Sensor Observed
0
Virtual Patch Available
0
Zhejiang Dahua Technology Co. KEVs Added by Year
Loading...
3 Zhejiang Dahua Technology Co. KEVs added all time (primary attestation date).
Attested CVEs
| CVE | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2024-13985
Dahua EIMS capture_handle.action RCE |
EIMS | High | Not in CISA | 06 Mar 2026 |
|
CVE-2025-34059
Dahua Smart Cloud Gateway Registration Management Platform SQL Injection |
Smart Cloud Gateway Registration Management Platform | High | Not in CISA | 29 Jan 2026 |
|
CVE-2023-7309
Dahua Smart Park Integrated Management Platform Front-End Arbitrary File Upload |
Smart Park Integrated Management Platform | High | Not in CISA | 11 Nov 2025 |
Common Vulnerability Classes (CWE)
- CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor 1
- CWE-22 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 1
- CWE-434 — Unrestricted Upload of File with Dangerous Type 1
- CWE-78 — Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 1
- CWE-89 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 1
Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology