CVE-2025-10264

published 2025-09-12

CVE-2025-10264: Certain models of NVR developed by Digiever has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remoter attackers to access the…

Priority P2 66 critical 10 CVSS 3.1

AV N AC L PR N UI N S C C H I H A H

Certain models of NVR developed by Digiever has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remoter attackers to access the system configuration file and obtain plaintext credentials of the NVR and its connected cameras.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
digiever	ds-1200	<= *.*.*.78	—
digiever	ds-16x00-rm_pro	<= x.x.x.78	—
digiever	ds-16x00-rm_uhd	<= x.x.x.78	—
digiever	ds-2100_pro	<= *.*.*.78	—
digiever	ds-2100_uhd	<= *.*.*.78	—
digiever	ds-2200_uhd	<= *.*.*.78	—
digiever	ds-4100-rm	<= x.x.x.78	—
digiever	ds-4200-rm_pro	<= x.x.x.78	—
digiever	ds-4200-rm_uhd	<= x.x.x.78	—
digiever	ds-4200_pro	<= *.*.*.78	—
digiever	ds-4200_uhd	<= x.x.x.78	—
digiever	ds-8x00-rm_pro	<= x.x.x.78	—
digiever	ds-8x00-rm_uhd	<= x.x.x.78	—
digiever	ds-8x00-srm_pro	<= x.x.x.78	—

CVSS provenance

nvd v3.1 10.0 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

nvd v4.0 10.0 CRITICAL CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-497