CVE-2025-10264CWE-497

Digiever|NVR - Exposure of Sensitive Information

Critical · published September 12, 2025

CVSS v4.0
10.0
EPSS
1%
Percentile
41.9
In the wild
Unconfirmed
What it is

🚨 Uh-oh, we've got an alarming vulnerability in Digiever's NVR models! Unauthenticated attackers can snatch sensitive configuration files and plaintext credentials from vulnerable devices! 🔥 Think of it like a security guard leaving the front door wide open while showing visitors the control room. Anyone can stroll in and peek at everything without a password! This could lead to a catastrophic breach where attackers gain full access to your NVR systems and connected cameras, putting all your surveillance data—and privacy—at serious risk. Imagine unauthorized eyes watching your every move without anyone knowing!

Put simply

Think of it like a security guard leaving the front door wide open while showing visitors the control room. Anyone can stroll in and peek at everything without a password! This vulnerability allows attackers to access system configuration files without authentication, exposing plaintext credentials for the NVR and its connected cameras, potentially leading to full system compromise.

What to do

This could lead to a catastrophic breach where attackers gain full access to your NVR systems and connected cameras, putting all your surveillance data—and privacy—at serious risk. Imagine unauthorized eyes watching your every move without anyone knowing! Immediately patch the affected NVR models to the latest firmware version released by Digiever. Review your network security settings and ensure that unauthorized access is restricted. Consider implementing additional layers of security, like a VPN, for remote access. You've got this! Stay vigilant and secure your systems today! 🛡️

The record
Technical detail
CVSS v4.0
10.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00500 · 41.9th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2025-09-12T10:06Z
EPSS history
Timeline
  • 12 SEP 10:06Z
    Digiever|NVR - Exposure of Sensitive Information
    cvelistv5