{"id":"CVE-2025-31704","kind":"vulnerability","aliases":["CVE-2025-31704"],"related":[],"title":"Dahua Intelligent Connection Center: crafted request runs commands remotely","description":"A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker to execute arbitrary commands, resulting in remote code execution.","summary":"The Dahua Intelligent Connection Center has a flaw that lets a remote attacker send a specially crafted request. That lets the attacker run arbitrary commands on the affected system.","severity":"critical","cvss":9.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dahua","icc","infrastructure","intelligent-connection-center","internet-facing","rce","surveillance"],"not_affected_if":["unknown"],"how_to_check":"Unknown: Dahua has not published affected versions in any page I could read. Check whether an ICC server is running and whether its web interface is reachable from the internet or untrusted networks; ask Dahua support for the fixed build.","fix":null,"status":"open","published_at":"2026-10-30T11:17:31+00:00","first_seen_at":"2026-10-30T11:29:51+00:00","triaged_at":"2026-10-30T11:31:21+00:00","updated_at":"2026-10-30T11:32:21+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-30T11:31:21Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"internet","title":"Dahua Intelligent Connection Center: crafted request runs commands remotely","impact":"high","summary":"The Dahua Intelligent Connection Center has a flaw that lets a remote attacker send a specially crafted request. That lets the attacker run arbitrary commands on the affected system.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dahua","intelligent-connection-center","surveillance"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker runs arbitrary commands on the server remotely","analyst_note":"Find the Dahua advisory and the affected and fixed versions, and confirm whether authentication is required, from https://nvd.nist.gov/vuln/detail/CVE-2025-31704.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"The sources describe a remote, unauthenticated-looking request path to an Intelligent Connection Center deployment, but do not state the affected versions or configuration. Teams running Dahua Intelligent Connection Center servers should treat it as exposed until the vendor's advisory is checked.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000647,"input_tokens":4088,"output_tokens":477,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find the Dahua advisory and the affected and fixed versions, and confirm whether authentication is required, from https://nvd.nist.gov/vuln/detail/CVE-2025-31704.","search":"'-2025':11A,14A '-31704':12A,15A 'affect':55B,79C 'allow':81C 'arbitrari':51B,86C 'attack':40B,49B,70C,83C 'center':4A,22B,32B,67C 'code':91C 'command':8A,52B,87C 'connect':3A,21B,31B,66C 'could':71C 'craft':5A,44B,75C 'cve':10A,13A 'dahua':1A,16B,29B,64C 'execut':85C,92C 'face':25B 'flaw':35B 'found':61C 'icc':17B 'infrastructur':18B 'intellig':2A,20B,30B,65C 'intelligent-connection-cent':19B 'internet':24B 'internet-fac':23B 'let':37B,47B 'rce':26B 'remot':9A,39B,69C,90C 'request':6A,45B,76C 'result':88C 'run':7A,50B 'send':41B,72C 'special':43B,74C 'surveil':27B 'system':56B,80C 'vulner':58C","nicknames":[],"mitigations":[],"who_affected":"Anyone running a Dahua Intelligent Connection Center (ICC) server. The CNA's own CVSS vector (AV:N/AC:L/PR:N/UI:N) means a remote attacker needs no login to send the crafted request and run commands. Servers reachable from the internet or a wide internal network are most at risk. Affected and fixed versions are not published in the sources I could read. Teams without ICC can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T11:17:31+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"cybersecurity@dahuatech.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-31704","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31704","severity":null,"published_at":"2026-10-30T11:17:31+00:00","modified_at":"2026-10-30T11:17:31+00:00","first_seen_at":"2026-10-30T11:29:51+00:00","fetched_at":"2026-10-30T11:29:51+00:00","note":null},{"source":"analyst","external_id":"CVE-2025-31704:1146","url":null,"severity":null,"published_at":"2026-10-30T11:32:21+00:00","modified_at":"2026-10-30T11:32:21+00:00","first_seen_at":"2026-10-30T11:32:21+00:00","fetched_at":"2026-10-30T11:32:21+00:00","note":"Only NVD (Dahua as CNA, CVSS 9.8, vector AV:N/AC:L/PR:N/UI:N so no auth) found. No Dahua PSIRT advisory located for this CVE; affected/fixed versions unknown, nothing verified. Search hits show public ICC RCE PoCs/IPS rules (/evo-runs/v1.0/push, receive; earlier GetClassValue) but they are not tied to this CVE by any primary source, so exploited stays false. Settle it by finding the Dahua SA on dahuasecurity.com trust center."}],"documents":[{"id":23152,"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31704","title":"NVD CVE-2025-31704 (CNA: Dahua, CVSS 9.8, AV:N/PR:N)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}