PT-2026-133434
CVE-2025-31704
·
Published
2026-10-30
·
Updated
2026-10-30
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Dahua Intelligent Connection Center versions prior to V5.000.0000000.15
Description
A remote attacker can execute arbitrary commands on the affected system by sending a specially crafted request, leading to remote code execution via command injection. Command injection is a flaw that allows an attacker to execute arbitrary operating system commands on the server.
Recommendations
Update to version V5.000.0000000.15.
Found an issue in the description? Have something to add? Feel free to write us 👾