EUVD-2025-211216: Command execution flaw in Dahua Intelligent Connection Center
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Dahua
- Product
- Intelligent Connection Center
- First seen
Summary
The EU Vulnerability Database entry EUVD-2025-211216 describes a vulnerability (CVSS 9.8) in the Dahua Intelligent Connection Center that could let a remote attacker run arbitrary commands via a crafted request. The entry does not state whether a vendor fix is available.
If you use Dahua
Restrict network access to the Intelligent Connection Center management interface
Check Dahua's security advisories for a fixed firmware or software version and apply it
Review the system for signs of unauthorized command execution
Identify any Dahua Intelligent Connection Center deployments and confirm their versions
Apply the vendor's fix or mitigation as soon as possible
Restrict network access to the management interface
What the sources say 2
· Mastodon: “A vulnerability has been found in the Dahua Intelligent Connection Center.” Source
· Mastodon: “A vulnerability has been found in the Dahua Intelligent Connection Center.” Source