Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-5113

Authenticated Remote Command Injection in Diviotec NBR IP Cameras

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ONEKEY

Description

The Diviotec professional series exposes a web interface. One endpoint is vulnerable to arbitrary command injection and hardcoded passwords are used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Diviotec nbr222p

Default version status: affected

  • 0 to ≤ 2.0170.3030affected

Diviotec nbr222pv

Default version status: affected

  • 0 to ≤ 2.0170.3030affected

Diviotec nbr224p

Default version status: affected

  • 0 to ≤ 2.0170.3030affected

Diviotec nbr225p

Default version status: affected

  • 0 to ≤ 2.0170.3030affected

Diviotec nbr226p

Default version status: affected

  • 0 to ≤ 2.0170.3030affected

Diviotec nbf232p

Default version status: affected

  • 0 to ≤ 2.0170.3030affected

Diviotec nbf233p

Default version status: affected

  • 0 to ≤ 2.0170.3030affected

Diviotec ndr252p

Default version status: affected

  • 0 to ≤ 2.0170.3030affected

Diviotec ndr255p

Default version status: affected

  • 0 to ≤ 2.0170.3030affected

References