Home

Description

Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request (SSRF), or execute OS commands.

PUBLISHED Reserved 2025-10-27 | Published 2025-11-18 | Updated 2025-11-18 | Assigner mitre

References

www.ericholub.com/blog/agent-dvr-rce/

ispysoftware.github.io/Agent_API/

cve.org (CVE-2025-63408)

nvd.nist.gov (CVE-2025-63408)

Download JSON