Live › vulnerability › CVE-2025-31704
The Dahua Intelligent Connection Center has a flaw that lets a remote attacker send a specially crafted request. That lets the attacker run arbitrary commands on the affected system.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 11:29 UTC. All times on this page are UTC.
Anyone running a Dahua Intelligent Connection Center (ICC) server. The CNA's own CVSS vector (AV:N/AC:L/PR:N/UI:N) means a remote attacker needs no login to send the crafted request and run commands. Servers reachable from the internet or a wide internal network are most at risk. Affected and fixed versions are not published in the sources I could read. Teams without ICC can skip it.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker to execute arbitrary commands, resulting in remote code execution.
This page as .md · .json · in your agent: get_signal("CVE-2025-31704")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.