CVE-2019-25255: VideoFlow Digital Video Protection DVP 2.10 Authenticated Remote Code Execution

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-24 · updated 2026-06-17
Weakness: CWE-78

Description

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery (CSRF) mechanism to gain unauthorized system access.

Affected products

VideoFlow Ltd. VideoFlow Digital Video Protection DVP: 2.10, 1.40.0.15, 2.10.0.5

References

http://www.video-flow.com
https://www.exploit-db.com/exploits/44387
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5455.php
http://www.video-flow.com
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5455.php

Get alerted when CVE-2019-25255 or the next vulnerability affects your stack