Sensitive Information Exposure in Digiever NVR Systems
CVE-2025-10264

10CRITICAL

Key Information:

Vendor

Digiever

Vendor
CVE Published:
12 September 2025

What is CVE-2025-10264?

Certain models of Digiever Network Video Recorders (NVR) are susceptible to vulnerabilities that permit unauthorized remote attackers to access sensitive system configuration files. This exposure allows attackers to retrieve plaintext credentials for the NVR itself and any connected cameras, significantly compromising the security and integrity of the surveillance system. It highlights the necessity for enhanced security measures to protect sensitive information against unauthorized access.

Affected Version(s)

DS-1200 0

DS-16x00-RM Pro+ 0

DS-16x00-RM UHD 0

References

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-10264 : Sensitive Information Exposure in Digiever NVR Systems