CVE-2025-10264

Digiever｜NVR - Exposure of Sensitive Information

State: Published
Severity: 10.0 Critical
Published: Sep 12, 2025
Updated: Sep 12, 2025
Reserved: Sep 11, 2025

Description

Certain models of NVR developed by Digiever has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remoter attackers to access the system configuration file and obtain plaintext credentials of the NVR and its connected cameras.

Scores

CVSS	Score	Vector	Source
4.0	10.0 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H	twcert
3.1	10.0 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	twcert

Weaknesses

CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

Affected Products

Product	Versions
DS-1200Digiever	..*.78 and earlierAffected
DS-2100 ProDigiever	..*.78 and earlierAffected
DS-2100 Pro+Digiever	..*.78 and earlierAffected
DS-2100 UHDDigiever	..*.78 and earlierAffected
DS-2200 UHDDigiever	..*.78 and earlierAffected
DS-2200 UHD+Digiever	..*.78 and earlierAffected
DS-4200 ProDigiever	..*.78 and earlierAffected
DS-4200 Pro+Digiever	x.x.x.78 and earlierAffected
DS-4200 UHDDigiever	x.x.x.78 and earlierAffected
DS-4200 UHD+Digiever	x.x.x.78 and earlierAffected
DS-4100-RMDigiever	x.x.x.78 and earlierAffected
DS-4200-RM Pro+Digiever	x.x.x.78 and earlierAffected
DS-4200-RM UHDDigiever	x.x.x.78 and earlierAffected
DS-8x00-RM Pro+Digiever	x.x.x.78 and earlierAffected
DS-8x00-SRM Pro+Digiever	x.x.x.78 and earlierAffected
DS-8x00-RM UHDDigiever	x.x.x.78 and earlierAffected
DS-16x00-RM Pro+Digiever	x.x.x.78 and earlierAffected
DS-16x00-RM UHDDigiever	x.x.x.78 and earlierAffected

References

https://www.twcert.org.tw/tw/cp-132-10375-19f1e-1.htmlthird-party-advisory
https://www.twcert.org.tw/en/cp-139-10376-a057c-2.htmlthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.