Intelligent Connection Center
Monthly
Remote unauthenticated command injection in Dahua Intelligent Connection Center allows network-reachable attackers to execute arbitrary commands with high confidentiality, integrity, and availability impact (CVSS 9.8). The supplied CPE has no version restriction, so all versions of the product family should be considered potentially affected until Dahua confirms fixed releases; the trigger endpoint or parameter is not described in the available sources. No public exploit identified at time of analysis and no CISA KEV entry was provided, but the vuln.today decision label is act_now.
Remote unauthenticated command injection in Dahua Intelligent Connection Center allows network-reachable attackers to execute arbitrary commands with high confidentiality, integrity, and availability impact (CVSS 9.8). The supplied CPE has no version restriction, so all versions of the product family should be considered potentially affected until Dahua confirms fixed releases; the trigger endpoint or parameter is not described in the available sources. No public exploit identified at time of analysis and no CISA KEV entry was provided, but the vuln.today decision label is act_now.