CVE-2025-31704 Dahua Intelligent Connection Center command injection
CriticalCVSS 9.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker to execute arbitrary commands, resulting in remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Dahua Intelligent Connection Center | >= V1.000.0000000.1, <= 1.000.0000005.0 | No fix listed |
| Dahua Intelligent Connection Center | >= V5.000.0000000.6, < V5.000.0000000.15 | V5.000.0000000.15 |
References
- www.cnvd.org.cn third-party-advisory