EUVD-2025-199000

🗓️ 24 Nov 2025 21:31:00Reported by EUVDType

NVMS-9000 firmware has hardcoded credentials and command injection via HTTP/XML and a TCP service; fixed since 2018.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2018-25126	24 Nov 202521:42	–	circl
CNNVD	TVT NVMS-9000 安全漏洞	24 Nov 202500:00	–	cnnvd
CVE	CVE-2018-25126	24 Nov 202520:30	–	cve
Cvelist	CVE-2018-25126 TVT NVMS-9000 Hard-coded API Credentials & Command Injection	24 Nov 202520:30	–	cvelist
NVD	CVE-2018-25126	24 Nov 202521:16	–	nvd
Positive Technologies	PT-2025-47964	24 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2018-25126	25 Nov 202520:56	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2018-25126	27 Mar 202000:00	–	vulncheck_kev
Vulnrichment	CVE-2018-25126 TVT NVMS-9000 Hard-coded API Credentials & Command Injection	24 Nov 202520:30	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "462dac82-70b7-3031-9d55-a4958a29f59e",
        "vendor": {
          "name": "Shenzhen TVT Digital Technology Co., Ltd."
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "dd1c7b77-62ef-3172-a89b-d371e8486127",
        "product": {
          "name": "NVMS-9000"
        },
        "product_version": "0 <mid-February firmware builds"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-25126
blogs	www.blogs.juniper.net/en-us/threat-research/iot-botnet-exploiting-tvt-shenzhen-dvrs-still-lingers
github	www.github.com/mcw0/PoC/blob/master/TVT_and_OEM_IPC_NVR_DVR_RCE_Backdoor_and_Information_Disclosure.txt
qkl	www.qkl.seebug.org/vuldb/ssvid-97217
web	www.web.archive.org/web/20180614014914/http://en.tvt.net.cn:80/news/227.html
vulncheck	www.vulncheck.com/advisories/tvt-nvms9000-hardcoded-api-credentials-and-command-injection

24 Nov 2025 21:31Current

7.3High risk

Vulners AI Score7.3

CVSS 49.3

EPSS0.00544

SSVC