Digiever|NVR - OS Command Injection
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Digiever | DS-1200 | unaffected |
|
||||||
| Digiever | DS-2100 Pro | unaffected |
|
||||||
| Digiever | DS-2100 Pro+ | unaffected |
|
||||||
| Digiever | DS-2100 UHD | unaffected |
|
||||||
| Digiever | DS-2200 UHD | unaffected |
|
||||||
| Digiever | DS-2200 UHD+ | unaffected |
|
||||||
| Digiever | DS-4200 Pro | unaffected |
|
||||||
| Digiever | DS-4200 Pro+ | unaffected |
|
||||||
| Digiever | DS-4200 UHD | unaffected |
|
||||||
| Digiever | DS-4200 UHD+ | unaffected |
|
||||||
| Digiever | DS-4100-RM | unaffected |
|
||||||
| Digiever | DS-4200-RM Pro+ | unaffected |
|
||||||
| Digiever | DS-4200-RM UHD | unaffected |
|
||||||
| Digiever | DS-8x00-RM Pro+ | unaffected |
|
||||||
| Digiever | DS-8x00-SRM Pro+ | unaffected |
|
||||||
| Digiever | DS-8x00-RM UHD | unaffected |
|
||||||
| Digiever | DS-16x00-RM Pro+ | unaffected |
|
||||||
| Digiever | DS-16x00-RM UHD | unaffected |
|
No data.
No data.
| Vendor | Product | Versions |
|---|---|---|
| Digiever | Ds-1200 | — |
| Digiever | Ds-16x00 | — |
| Digiever | Ds-2100 | — |
| Digiever | Ds-4100 | — |
| Digiever | Ds-4200 | — |
| Digiever | Nvr | — |
Vendor Solution
Update firmware version to x.x.x.79 and later
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2025-29039 | Certain models of NVR developed by Digiever has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device. |
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: 1.2% (1.155% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Digiever
Digiever ds-1200 Digiever ds-16x00 Digiever ds-2100 Digiever ds-4100 Digiever ds-4200 Digiever nvr |
|
| Vendors & Products |
Digiever
Digiever ds-1200 Digiever ds-16x00 Digiever ds-2100 Digiever ds-4100 Digiever ds-4200 Digiever nvr |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Certain models of NVR developed by Digiever has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device. | Certain models of NVR developed by Digiever has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device. |
| Metrics |
cvssV3_1
|
cvssV3_1
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Certain models of NVR developed by Digiever has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device. | |
| Title | Digiever|NVR - OS Command Injection | |
| Weaknesses | CWE-78 | |
| References |
| |
| Metrics |
cvssV3_1
|