CVE-2022-25012

Argus Surveillance DVR v4.0 employs weak password encryption.

CVSS v3.1 NVD

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 NVD

2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.37% chance of exploitation in the next 30 days, 29th percentile

Published

2022-03-01

Updated

2024-08-03

Proof-of-concept exploits (4)

• https://www.exploit-db.com/exploits/50130
• G4sp4rCS/CVE-2022-25012-POC0★ · 2025-04-29
• s3l33/CVE-2022-250128★ · 2023-04-01
• m1kb0k/CVE-2022-25012-dvr4-weak-password-encryption1★ · 2026-08-05

Security advisories

• https://leobreaker1411.github.io/blog/dvr4-hash-crack

References

• CVE Record
• NVD entry

Related

• CVE-2015-8351
• CVE-2019-11707
• CVE-2021-43857
• CVE-2023-2255
• CVE-2023-32784
• CVE-2023-40931