Vulnerability Description
Certain models of NVR developed by Digiever has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.
CVSS Score
8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Related Weaknesses (CWE)
References
- https://www.twcert.org.tw/en/cp-139-10376-a057c-2.html
- https://www.twcert.org.tw/tw/cp-132-10375-19f1e-1.html
FAQ
What is CVE-2025-10265?
CVE-2025-10265 is a vulnerability with a CVSS score of 8.8 (HIGH). Certain models of NVR developed by Digiever has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.
How severe is CVE-2025-10265?
CVE-2025-10265 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-10265?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.