CVE-2025-3403mediumCWE-200CWE-540

CVE-2025-3403: medium-severity vulnerability in Vivotek NVR ND8422P

Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source

Published

Follow this CVE+ Monitor NVR ND8422P+ Monitor NVR ND9525P

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.1epss 0.4%
A vulnerability was found in Vivotek NVR ND8422P, NVR ND9525P and NVR ND9541P 2.4.0.204/3.3.0.104/4.2.0.101. It has been classified as problematic. Affected is an unknown function of the component HTML Form Handler. The manipulation leads to inclusion of sensitive information in source code. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Vivotek · NVR ND8422PVivotek · NVR ND9525PVivotek · NVR ND9541P