CVE-2019-25240

8.7 highEPSS 0.5%

High (8.7). EPSS 0.5% chance of exploitation in the next 30 days.

Rifatron 5brid DVR contains an unauthenticated vulnerability in the animate.cgi script that allows unauthorized access to live video streams. Attackers can exploit the Mobile Web Viewer module by specifying channel numbers to retrieve sequential video snapshots without authentication.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2025-12-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

http://www.rifatron.com
https://www.exploit-db.com/exploits/47368
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5532.php
https://www.exploit-db.com/exploits/47368
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5532.php

Check your stack JSON