CVE-2025-6561 CRITICAL

CVE-2025-6561: Hunt Electronic Hybrid DVR - Exposure of Sensitive System Information

Vendor Hunt Electronic
Product HBF-09KD
Weakness CWE-497
Published June 26, 2025
Last update June 26, 2025

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Certain hybrid DVR models ((HBF-09KD and HBF-16NK)) from Hunt Electronic have an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to directly access a system configuration file and obtain plaintext administrator credentials.

Key dates

02Disclosure timeline

June 26, 2025 CVE published
June 26, 2025 Record updated