Digiever vulnerabilities
We track 3 vulnerabilities in Digiever products across 15 products. 3 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on September 12, 2025.
Latest Digiever vulnerabilities
- 8.8 High severity
DS-1200: Improper Neutralization of Special Elements used in an OS Command
Certain models of NVR developed by Digiever has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.
- 10.0 Critical severity
DS-1200: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Certain models of NVR developed by Digiever has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remoter attackers to access the system configuration file and obtain plaintext credentials of the NVR and its connected cameras.
- 8.8 High severity
Digiever DS-2105 Pro Missing Authorization Exploited
Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.