CVE-2025-41418

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-06-27 · updated 2026-06-17
Weakness: CWE-120

Description

Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders. The CGI process may be terminated abnormally by processing a specially crafted request.

Affected products

TB-eye Ltd. HRX-1621/TE: through firmware versions Ver3.05.62
TB-eye Ltd. HRX-1635/TE: through firmware versions Ver5.31.72
TB-eye Ltd. HRX-421FN/TE: through firmware versions Ver3.05.62
TB-eye Ltd. HRX-435FN/TE: through firmware versions Ver5.31.72
TB-eye Ltd. HRX-821/TE: through firmware versions Ver3.05.62
TB-eye Ltd. HRX-835/TE: through firmware versions Ver5.31.72
TB-eye Ltd. PRN-4011N/TE: through firmware versions Ver2.51p_231208081715
TB-eye Ltd. XRN-1610SN/TE: through firmware versions Ver2.47b_210516234524
TB-eye Ltd. XRN-1620S/TE: through firmware versions Ver5.34.12
TB-eye Ltd. XRN-3210R/TE: through firmware versions Ver5.34.12
TB-eye Ltd. XRN-410SN/TE: through firmware versions Ver2.47b_220119153805
TB-eye Ltd. XRN-425SFN/TE: through firmware versions Ver5.31.32
TB-eye Ltd. XRN-426S: through firmware versions Ver5.33.12
TB-eye Ltd. XRN-6410DR/TE: through firmware versions Ver5.34.12
TB-eye Ltd. XRN-6410R/TE: through firmware versions Ver5.34.12
TB-eye Ltd. XRN-810SN/TE: through firmware versions Ver2.47b_220119153805
TB-eye Ltd. XRN-820S/TE: through firmware versions Ver5.34.12

References

Get alerted when CVE-2025-41418 or the next vulnerability affects your stack