CVE-2025-10264: Digiever｜NVR - Exposure of Sensitive Information

Published Sep 12, 2025

Updated

Certain models of NVR developed by Digiever has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remoter attackers to access the system configuration file and obtain plaintext credentials of the NVR and its connected cameras.

Affected Software

1 affected component

Digiever NVR

Remediation

Information

Update firmware version to x.x.x.79 and later

Event History

Sep 12, 2025

CVE Published

via MITRE·10:06 AM

Data Sourced

via MITRE·10:06 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-10264?

CVE-2025-10264 is considered a high-severity vulnerability due to its potential for unauthorized access to sensitive information.

How do I fix CVE-2025-10264?

To mitigate CVE-2025-10264, update to the latest firmware version provided by Digiever and ensure proper access controls are implemented.

What types of systems are affected by CVE-2025-10264?

CVE-2025-10264 affects certain models of NVR developed by Digiever.

What information is exposed by CVE-2025-10264?

CVE-2025-10264 allows attackers to access the system configuration file, which contains plaintext credentials.

Can CVE-2025-10264 be exploited remotely?

Yes, CVE-2025-10264 can be exploited by unauthenticated remote attackers.