VULNERABILITY INTELLIGENCE

CVE-2019-25255

CVSS score8.7 HIGH

EPSS probability0.44%

CISA KEVNot currently listed

Published2025-12-24

Last modified2026-06-17

Description

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery (CSRF) mechanism to gain unauthorized system access.