OS Command Injection Vulnerability in Hunt Electronic Hybrid DVR Models
CVE-2025-6562

8.7HIGH

Key Information:

Vendor

Hunt Electronic

Status
Hybrid Dvr
Vendor
CVE Published:
26 June 2025

What is CVE-2025-6562?

Certain hybrid DVR models from Hunt Electronic, specifically the HBF-09KD and HBF-16NK, have been found to contain a vulnerability that allows an attacker with standard user privileges to inject arbitrary operating system commands. This weakness could potentially be exploited by malicious individuals to execute unauthorized commands on the device remotely, posing a serious risk to the integrity and security of the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Hybrid DVR 0

Hybrid DVR 0

References

https://www.twcert.org.tw/tw/cp-132-10201-044e9-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10202-f957b-2.html
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.