by Kastro
Paper/Archive/CVE-2025-6561

CVE-2025-6561

Hunt Electronic HBF-09KD — Hunt Electronic Hybrid DVR - Exposure of Sensitive System Information

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 45.8.458 × 209.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Certain hybrid DVR models ((HBF-09KD and HBF-16NK)) from Hunt Electronic have an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to directly access a system configuration file and obtain plaintext administrator credentials.

Affected

ProductAffectedFixed inSource
HBF-09KD≤ V3.1.67_1786 BB11115–CNA
HBF-16NK≤ V3.1.67_1786 BB11115–CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeuptwcert.org.tw/tw/cp-132-10199-9c5c6-1.htmlwriteuptwcert.org.tw/en/cp-139-10200-6b567-2.html