CVE-2019-25255

VideoFlow Digital Video Protection DVP 2.10 Authenticated Remote Code Execution

CVSS 8.7 HIGHEPSS 0.4%CWE-78

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.7EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

24 dic 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery (CSRF) mechanism to gain unauthorized system access.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Productos afectados

VideoFlow Ltd. · VideoFlow Digital Video Protection DVP

Referencias

https://www.exploit-db.com/exploits/44387 https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5455.php http://www.video-flow.com