Some Dahua software products have a vulnerability of unrestricted download of file. After obtaining the permissions of ordinary users, by sending a specific crafted packet to the vulnerable interface, an attacker can download arbitrary files.Referenceshttps://www.dahuasecurity.com/support/cybersecurity/details/1137