CVE-2022-25012

MEDIUM

Argus Surveillance DVR v4.0 employs weak password encryption.

Affects 1 product across 1 vendor.

CVSS 3.15.5
EPSS0.4%
Percentile29th
PatchUnknown
CVSS Vector — Plain English Requires local access, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, no integrity impact, no availability impact.
CWE Weakness Definitions
CWE-326: CWE-326
Related Attack Patterns (CAPEC)
CAPEC-20 Encryption Brute Forcing
via CWE-326
CAPEC-112 Brute Force
via CWE-326
CAPEC-192 Protocol Analysis
via CWE-326

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

Argus Surveillance DVR v4.0 uses weak password encryption, which could allow attackers to gain unauthorized access to the system.

BSID: BS-2022-GLOBAL-314529-M • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2022-25012?
Argus Surveillance DVR v4.0 uses weak password encryption, which could allow attackers to gain unauthorized access to the system.
What is the CVSS score for CVE-2022-25012?
CVE-2022-25012 has CVSS 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS: 0.4%.
Is CVE-2022-25012 actively exploited?
No confirmed active exploitation of CVE-2022-25012 as of 2026-05-30.
How do I remediate CVE-2022-25012?
Priority: MEDIUM.
What systems are affected by CVE-2022-25012?
CVE-2022-25012 affects Argussurveillance Dvr.
Vulnerability Details
CVE IDCVE-2022-25012
BSIDBS-2022-GLOBAL-314529-M BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published2022-03-01
Last Modified2024-11-21
ICS Relevance0%
Weakness (CWE)
CWE-326
SourceNVD
Official Description

Argus Surveillance DVR v4.0 employs weak password encryption.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker could exploit the weak password encryption to crack user passwords, potentially leading to unauthorized access to the surveillance system's video feeds and configuration settings.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Argussurveillance Dvr 4.0.0.0
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 1689 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hasha9f90c09e34566707b76784774283487de67495e8c70e0542d800fe471daa49bf04c8a927eab4a76117e165d89a3e1f77ea156967f7ec1eddaaa8ef84150b807
Related CVEs affecting Argussurveillance
CVE-2018-15745 7.5 Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traver...
View all Argussurveillance CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →