Dahua Intelligent Connection Center: OS command injection allows remote code execution
The Dahua Intelligent Connection Center contains a command injection flaw (CWE-78) that can be triggered by a specially crafted network request. According to the CVSS vector, no authentication or user interaction is required, and an attacker could execute arbitrary commands with high impact on confidentiality, integrity and availability. Version data is provisional because the vendor advisory could not be located and NVD analysis was still pending at publication.
Dahua · Intelligent Connection Center
