Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-31704

Dahua Intelligent Connection Center command injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dahua

Description

A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker to execute arbitrary commands, resulting in remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dahua Intelligent Connection Center

Default version status: unaffected

  • V1.000.0000000.1 to ≤ 1.000.0000005.0affected
  • V5.000.0000000.6 to < V5.000.0000000.15affected

References