CVE-2025-31702 Dahua P2P relay probe/device HMAC replay bypass

Ibrahim Saud@tektrix

•updated 25 days ago•0•0•4

Detects network activity related to the exploitation of the CVE-2025-31702 vulnerability in Dahua P2P Relay services. The rules monitor for probe attempts, device parameter fetching (randsalt), serial number enumeration bursts, and successful no-auth channel responses, indicating a bypass of authentication mechanisms on vulnerable Dahua devices.