Vulnerability details
CVE-2025-10264
Digiever DS-1200Digiever DS-16x00-RM Pro+Digiever DS-16x00-RM UHDDigiever DS-2100 ProDigiever DS-2100 UHDDigiever DS-2200 UHD
Digiever｜NVR - Exposure of Sensitive Information
CVSS 4.0
10.0Critical
Official description
Certain models of NVR developed by Digiever has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remoter attackers to access the system configuration file and obtain plaintext credentials of the NVR and its connected cameras.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 10.0Critical | 4.0 | CVEProject cvelistV5 (CNA) (twcert) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
| 10.0Critical | 3.1 | CVEProject cvelistV5 (CNA) (twcert) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Digiever | DS-1200 | v ≤ *.*.*.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-16x00-RM Pro+ | v ≤ x.x.x.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-16x00-RM UHD | v ≤ x.x.x.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-2100 Pro | v ≤ *.*.*.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-2100 Pro | v ≤ *.*.*.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-2100 UHD | v ≤ *.*.*.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-2200 UHD | v ≤ *.*.*.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-2200 UHD | v ≤ *.*.*.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-4100-RM | v ≤ x.x.x.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-4200 Pro | v ≤ *.*.*.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-4200 Pro | v ≤ x.x.x.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-4200 UHD | v ≤ x.x.x.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-4200 UHD | v ≤ x.x.x.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-4200-RM Pro+ | v ≤ x.x.x.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-4200-RM UHD | v ≤ x.x.x.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-8x00-RM Pro+ | v ≤ x.x.x.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-8x00-RM UHD | v ≤ x.x.x.78 | CVEProject cvelistV5 (CNA) |
| Digiever | DS-8x00-SRM Pro+ | v ≤ x.x.x.78 | CVEProject cvelistV5 (CNA) |
References and advisories
2- https://www.twcert.org.tw/tw/cp-132-10375-19f1e-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-10376-a057c-2.html third-party-advisory
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-09-12
- Last updated
- 2025-09-12
- State
- Published
- Assigner (CNA)
- twcert
Exploit prediction (EPSS)
0.5%
Probability of exploitation in 30 days
43.1%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere