Skip to content
OpenAdvisories
High · 8.8 CVE-2025-10265 EUVD-2025-29039GHSA-g98r-xrvm-6xfj

Digiever｜NVR - OS Command Injection

Published Sep 12, 2025 · Updated Sep 29, 2025 · Assigned by twcert

Vendor: Digiever Product: DS-1200 Product: DS-16x00-RM Pro+ Product: DS-16x00-RM UHD Product: DS-2100 Pro Product: DS-2100 UHD Product: DS-2200 UHD Product: DS-4100-RM Product: DS-4200 Pro Product: DS-4200 UHD Product: DS-4200-RM Pro+ Product: DS-4200-RM UHD Product: DS-8x00-RM Pro+ Product: DS-8x00-RM UHD Product: DS-8x00-SRM Pro+

Description

Certain models of NVR developed by Digiever has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.

Affected products

VendorProductAffectedFixed
Digiever DS-1200 ≤ *.*.*.78 —
Digiever DS-2100 Pro ≤ *.*.*.78 —
Digiever DS-2100 Pro+ ≤ *.*.*.78 —
Digiever DS-2100 UHD ≤ *.*.*.78 —
Digiever DS-2200 UHD ≤ *.*.*.78 —
Digiever DS-2200 UHD+ ≤ *.*.*.78 —
Digiever DS-4200 Pro ≤ *.*.*.78 —
Digiever DS-4200 Pro+ ≤ *.*.*.78 —
Digiever DS-4200 UHD ≤ *.*.*.78 —
Digiever DS-4200 UHD+ ≤ *.*.*.78 —
Digiever DS-4100-RM ≤ *.*.*.78 —
Digiever DS-4200-RM Pro+ ≤ *.*.*.78 —
Digiever DS-4200-RM UHD ≤ *.*.*.78 —
Digiever DS-8x00-RM Pro+ ≤ *.*.*.78 —
Digiever DS-8x00-SRM Pro+ ≤ *.*.*.78 —
Digiever DS-8x00-RM UHD ≤ *.*.*.78 —
Digiever DS-16x00-RM Pro+ ≤ *.*.*.78 —
Digiever DS-16x00-RM UHD ≤ *.*.*.78 —

References