← CVE Intelligence

CVE-2025-5113

Authenticated Remote Command Injection in Diviotec NBR IP Cameras PUBLISHED

Description (CNA)

The Diviotec professional series exposes a web interface. One endpoint is vulnerable to arbitrary command injection and hardcoded passwords are used.

Affected (CNA)

Vendor / product	Versions
Diviotec / nbr222p	affected 0 through 2.0170.3030
Diviotec / nbr222pv	affected 0 through 2.0170.3030
Diviotec / nbr224p	affected 0 through 2.0170.3030
Diviotec / nbr225p	affected 0 through 2.0170.3030
Diviotec / nbr226p	affected 0 through 2.0170.3030
Diviotec / nbf232p	affected 0 through 2.0170.3030
Diviotec / nbf233p	affected 0 through 2.0170.3030
Diviotec / ndr252p	affected 0 through 2.0170.3030
Diviotec / ndr255p	affected 0 through 2.0170.3030

CWE

CWE-77

References

https://www.onekey.com/resource/security-advisory-remote-code-execution-on-diviotec-ip-camera-cve-2025-5113

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.