An authenticated remote attacker can send a specially crafted packet to certain Dahua IPC/SD devices, triggering an exception in the system that forces an unexpected reboot. This reboot interrupts normal operation and results in a denial of service. The weakness is classified as CWE‑617, indicating a flaw related to incorrect handling of a null or uninitialized reference.

The affected products are Dahua security cameras under the IPC/SD line. Specific model or firmware versions are not enumerated in the advisory; the impact applies to any device that falls within this product classification unless a vendor‑released fix has been applied.

The vulnerability carries a CVSS score of 6.9, indicating moderate severity. No publicly available EPSS score was provided, and the issue is not listed in the CISA KEV catalog. The attack vector is remote but requires authentication, which suggests that a compromised user account or stolen credentials give the attacker the necessary access. Because the flaw causes an abrupt reboot rather than code execution, the exploit is limited to service disruption rather than data exfiltration or privilege escalation.