PT-2025-53322 · Iseeq · Hybrid Dvr Wh-H4

Published 2025-12-24 · Updated 2025-12-24 · CVE-2019-25236

Mitre

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

iSeeQ Hybrid DVR WH-H4 1.03R contains an unauthenticated vulnerability in the get jpeg script that allows unauthorized access to live video streams. Attackers can retrieve video snapshots from specific camera channels by sending requests to the /cgi-bin/get jpeg endpoint without authentication.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-25236

Affected Products

Hybrid Dvr Wh-H4

References · 4

• 🔥 https://exploit-db.com/exploits/47562 · Exploit
• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2019-5539.php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25236 · Security Note
• http://iseeq.co.kr · Note