Vulnerability · Published Jun 27, 2025 · Assigned by jpcert
CVE-2025-36529
High 7.2
In plain English
A high-severity OS command injection in HRX-1621/TE from TB-eye Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 67% of all known vulnerabilities).
Severity (CVSS 3.1)7.2High
Exploit odds (30 days)1.2%top 32.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An OS command injection issue exists in multiple versions of TB-eye network recorders and AHD recorders. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who is logging in to the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TB-eye Ltd. | XRN-410SN/TE | firmware versions Ver2.47b_220119153805 and earlier |
| TB-eye Ltd. | XRN-810SN/TE | firmware versions Ver2.47b_220119153805 and earlier |
| TB-eye Ltd. | XRN-1610SN/TE | firmware versions Ver2.47b_210516234524 and earlier |
| TB-eye Ltd. | PRN-4011N/TE | firmware versions Ver2.51p_231208081715 and earlier |
| TB-eye Ltd. | HRX-421FN/TE | firmware versions Ver3.05.62 and earlier |
| TB-eye Ltd. | HRX-821/TE | firmware versions Ver3.05.62 and earlier |
| TB-eye Ltd. | HRX-1621/TE | firmware versions Ver3.05.62 and earlier |
| TB-eye Ltd. | HRX-435FN/TE | firmware versions Ver5.31.72 and earlier |
| TB-eye Ltd. | HRX-835/TE | firmware versions Ver5.31.72 and earlier |
| TB-eye Ltd. | HRX-1635/TE | firmware versions Ver5.31.72 and earlier |
| TB-eye Ltd. | XRN-425SFN/TE | firmware versions Ver5.31.32 and earlier |
| TB-eye Ltd. | XRN-426S | firmware versions Ver5.33.12 and earlier |
| TB-eye Ltd. | XRN-820S/TE | firmware versions Ver5.34.12 and earlier |
| TB-eye Ltd. | XRN-1620S/TE | firmware versions Ver5.34.12 and earlier |
| TB-eye Ltd. | XRN-3210R/TE | firmware versions Ver5.34.12 and earlier |
| TB-eye Ltd. | XRN-6410R/TE | firmware versions Ver5.34.12 and earlier |
| TB-eye Ltd. | XRN-6410DR/TE | firmware versions Ver5.34.12 and earlier |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H