critical
advisory
Dahua Eims: Unauthenticated Remote OS Command Injection (CVE-2024-13985)
A public proof-of-concept exploit has been published for CVE-2024-13985, an unauthenticated remote OS command injection vulnerability in Dahua Eims.
CVE search metadata
CVE search record: CVE-2024-13985. EPSS: 15.10%. KEV: no. Product: Eims. Brief: Dahua Eims: Unauthenticated Remote OS Command Injection (CVE-2024-13985). Brief link: https://feed.craftedsignal.io/briefs/2026-10-dahua-eims-rce/
Triage facts
Revision 1- Applicability
- Eims
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 2 public sources
- Freshness
- Revision 1Oct 26, 18:01 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- C3Roughly even chance
CVE-2024-13985 is a vulnerability affecting Dahua Eims. The vulnerability allows for unauthenticated remote OS command injection via the 'captureCommand' parameter to the 'capture_handle.action' endpoint, enabling arbitrary commands on the server. Public proof-of-concept exploit code has been published on Sploitus.