CVE-2019-25240

Rifatron 5brid DVR 5brid DVR (HD6-532/516, DX6-516/508/504, MX6-516/508/504, EH6-504) Unauthenticated Live Stream Disclosure via animate.cgi

CVSS 8.7 HIGHEPSS 0.4%CWE-306

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.7EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

24 dic 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Rifatron 5brid DVR contains an unauthenticated vulnerability in the animate.cgi script that allows unauthorized access to live video streams. Attackers can exploit the Mobile Web Viewer module by specifying channel numbers to retrieve sequential video snapshots without authentication.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Productos afectados

Rifatron Co., Ltd. · DVR

Referencias

https://www.exploit-db.com/exploits/47368 https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5532.php http://www.rifatron.com