Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2019-25255

VideoFlow Digital Video Protection DVP 2.10 Authenticated Remote Code Execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery (CSRF) mechanism to gain unauthorized system access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VideoFlow Ltd. VideoFlow Digital Video Protection DVP

  • 2.10affected
  • 1.40.0.15affected
  • 2.10.0.5affected

References