CVE-2023-3836

MEDIUM EXPLOITED NUCLEI

Dahua Smart Park Management <20230713 - Unrestricted Upload

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2023-3836 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including zh-byte. A Nuclei detection template is also available.

AI-analyzed exploit summary This repository contains a functional exploit for CVE-2023-3836, targeting a file upload vulnerability in the Dahua Smart Park Comprehensive Management Platform. The PoC uploads a JSP file with a test payload and verifies its execution by checking for the presence of the string 'vultest' in the response.

Description

A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713. This vulnerability affects unknown code of the file /emap/devicePoint_addImgIco?hasSubsystem=true. The manipulation of the argument upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235162 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Exploits (1)

nomisec WORKING POC
by zh-byte · remote
https://github.com/zh-byte/CVE-2023-3836

This repository contains a functional exploit for CVE-2023-3836, targeting a file upload vulnerability in the Dahua Smart Park Comprehensive Management Platform. The PoC uploads a JSP file with a test payload and verifies its execution by checking for the presence of the string 'vultest' in the response.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Dahua Smart Park Comprehensive Management Platform
No auth needed
Prerequisites: Network access to the target system · Target system running vulnerable Dahua Smart Park software
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Nuclei Templates (1)

Dahua Smart Park Management - Arbitrary File Upload
CRITICALVERIFIEDby HuTa0
Shodan: html:"/WPMS/asset" || http.html:"/wpms/asset"
FOFA: body="/wpms/asset"

References (3)

Core 3
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.235162
Permissions Required, Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.235162

Scores

CVSS v3 6.3
EPSS 0.7352
EPSS Percentile 99.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

VulnCheck KEV 2023-11-25
CWE
CWE-434
Status published
Products (1)
dahuasecurity/smart_parking_management < 20230713
Published Jul 22, 2023
Tracked Since Feb 18, 2026