by Kastro CVE-2025-10264
Digiever DS-1200 — Digiever｜NVR - Exposure of Sensitive Information
Description · from the CVE record
Certain models of NVR developed by Digiever has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remoter attackers to access the system configuration file and obtain plaintext credentials of the NVR and its connected cameras.
Affected
ProductAffectedFixed inSource
DS-1200≤ *.*.*.78–CNA
DS-2100 Pro≤ *.*.*.78–CNA
DS-2100 Pro+≤ *.*.*.78–CNA
DS-2100 UHD≤ *.*.*.78–CNA
DS-2200 UHD≤ *.*.*.78–CNA
DS-2200 UHD+≤ *.*.*.78–CNA
DS-4200 Pro≤ *.*.*.78–CNA
DS-4200 Pro+≤ x.x.x.78–CNA
DS-4200 UHD≤ x.x.x.78–CNA
DS-4200 UHD+≤ x.x.x.78–CNA
DS-4100-RM≤ x.x.x.78–CNA
DS-4200-RM Pro+≤ x.x.x.78–CNA
Scores by source
twcert (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
twcert (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total