Remote Code Execution Vulnerability in Dahua Intelligent Connection Center
CVE-2025-31704

9.8CRITICAL

Key Information:

Vendor

Dahua

Status
Intelligent Connection Center
Vendor
CVE Published:
30 October 2026

What is CVE-2025-31704?

A vulnerability has been identified in the Dahua Intelligent Connection Center that allows remote attackers to craft malicious requests. By exploiting this flaw, attackers can execute arbitrary commands on the system, potentially leading to unauthorized access and control over the affected device.

Affected Version(s)

Intelligent Connection Center V1.000.0000000.1 <= 1.000.0000005.0

Intelligent Connection Center V5.000.0000000.6

References

https://www.cnvd.org.cn/flaw/show/CNVD-2025-00420
third-party-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.