CyberRota Analysis
Uzaktan istismar edilebilir olabilir.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Detected Signals
exploit remote code execution code execution
External Security References
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2018-25310
Severity
MEDIUM
CVSS
4.3
EPSS
0.04%
Original NVD Description
VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting a cross-site request forgery flaw in the web management interface. Attackers with valid credentials can leverage the CSRF vulnerability to inject and execute system commands through the Tools > System > Shell interface, gaining root-level access to the device.