{"id":"CVE-2025-10264","state":"PUBLISHED","title":"Digiever｜NVR - Exposure of Sensitive Information","description":"Certain models of NVR developed by Digiever has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remoter attackers to access the system configuration file and obtain plaintext credentials of the NVR and its connected cameras.","publishedAt":"2025-09-12T10:06:12.163Z","updatedAt":"2025-09-12T15:52:40.298Z","severity":{"score":10,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","source":"twcert"},"assigner":"twcert","products":["Digiever DS-1200","Digiever DS-2100 Pro","Digiever DS-2100 Pro+","Digiever DS-2100 UHD","Digiever DS-2200 UHD","Digiever DS-2200 UHD+","Digiever DS-4200 Pro","Digiever DS-4200 Pro+","Digiever DS-4200 UHD","Digiever DS-4200 UHD+","Digiever DS-4100-RM","Digiever DS-4200-RM Pro+","Digiever DS-4200-RM UHD","Digiever DS-8x00-RM Pro+","Digiever DS-8x00-SRM Pro+","Digiever DS-8x00-RM UHD","Digiever DS-16x00-RM Pro+","Digiever DS-16x00-RM UHD"],"affected":[{"vendor":"Digiever","product":"DS-1200","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*.*.*.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-2100 Pro","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*.*.*.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-2100 Pro+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*.*.*.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-2100 UHD","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*.*.*.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-2200 UHD","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*.*.*.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-2200 UHD+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*.*.*.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-4200 Pro","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*.*.*.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-4200 Pro+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-4200 UHD","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-4200 UHD+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-4100-RM","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-4200-RM Pro+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-4200-RM UHD","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-8x00-RM Pro+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-8x00-SRM Pro+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-8x00-RM UHD","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-16x00-RM Pro+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-16x00-RM UHD","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]}],"references":["https://www.twcert.org.tw/tw/cp-132-10375-19f1e-1.html","https://www.twcert.org.tw/en/cp-139-10376-a057c-2.html"],"weaknesses":["CWE-497"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/10xxx/CVE-2025-10264.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-10264","state":"PUBLISHED","datePublished":"2025-09-12T10:06:12.163Z","dateUpdated":"2025-09-12T15:52:40.298Z","assignerShortName":"twcert","assignerOrgId":"cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e","dateReserved":"2025-09-11T11:42:41.676Z"},"containers":{"cna":{"title":"Digiever｜NVR - Exposure of Sensitive Information","descriptions":[{"lang":"en","value":"Certain models of NVR developed by Digiever has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remoter attackers to access the system configuration file and obtain plaintext credentials of the NVR and its connected cameras."}],"affected":[{"vendor":"Digiever","product":"DS-1200","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*.*.*.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-2100 Pro","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*.*.*.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-2100 Pro+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*.*.*.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-2100 UHD","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*.*.*.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-2200 UHD","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*.*.*.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-2200 UHD+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*.*.*.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-4200 Pro","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*.*.*.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-4200 Pro+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-4200 UHD","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-4200 UHD+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-4100-RM","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-4200-RM Pro+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-4200-RM UHD","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-8x00-RM Pro+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-8x00-SRM Pro+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-8x00-RM UHD","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-16x00-RM Pro+","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]},{"vendor":"Digiever","product":"DS-16x00-RM UHD","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"x.x.x.78","versionType":"custom"}]}],"references":[{"url":"https://www.twcert.org.tw/tw/cp-132-10375-19f1e-1.html","tags":["third-party-advisory"]},{"url":"https://www.twcert.org.tw/en/cp-139-10376-a057c-2.html","tags":["third-party-advisory"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":10,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":10,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-497","description":"CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"twcert","orgId":"cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e","dateUpdated":"2025-09-12T10:06:12.163Z"},"datePublic":"2025-09-12T09:53:00.000Z","impacts":[{"capecId":"CAPEC-37","descriptions":[{"lang":"en","value":"CAPEC-37 Retrieve Embedded Sensitive Data"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Update firmware version to x.x.x.79 and later"}],"value":"Update firmware version to x.x.x.79 and later"}],"source":{"advisory":"TVN-202509001","discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-09-12T15:49:49.277357Z","id":"CVE-2025-10264","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-09-12T15:52:40.298Z"}}]}}}