RULE(RULE ID:338655)

Rule General Information
Release Date: 2025-01-15
Rule Name: Dahua iConnection Center GetClassValue.jsp Remote Code Execution Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: A remote code execution vulnerability exists in GetClassValue.jsp endpoint of Dahua iConnection Center. Unauthorized adversaries could execute arbitrary command on the remote server by exploiting the vulnerability, gaining access to system privilege.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.