Digiever NVR OS Command Injection Vulnerability
Vulnerability
A command injection vulnerability has been identified in certain NVR models developed by Digiever. This vulnerability allows unauthenticated remote attackers to inject and execute arbitrary operating system commands on the affected device. The issue is present in several NVR series models running firmware versions through x.x.x.78.
Impact
Exploitation of this vulnerability allows for arbitrary command execution on the affected NVR device.
Remediation
Users are advised to update the NVR firmware to version x.x.x.79 or later.
Added: Sep 12, 2025, 11:23 AM
Updated: Sep 12, 2025, 11:23 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
7.4remediation
7.7relevance
0.5threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.