CVE-2019-25255CWE-78

VideoFlow Digital Video Protection DVP 2.10 Authenticated Remote Code Execution

High · published December 24, 2025

CVSS v4.0
8.7
EPSS
0%
Percentile
37.5
In the wild
Unconfirmed
What it is

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery (CSRF) mechanism to gain unauthorized system access.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00443 · 37.5th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-12-24T19:28Z
EPSS history
Timeline
  • 24 DEC 19:28Z
    VideoFlow Digital Video Protection DVP 2.10 Authenticated Remote Code Execution
    cvelistv5