Threat Investigation
Request a demo

CVE-2025-41418

Medium

Description

Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders. The CGI process may be terminated abnormally by processing a specially crafted request.

SeverityMedium
CVSS5.3
Exploit probability—
ProductXRN-410SN/TE
PublishedJun 27, 2025
First seenJun 27, 2025
Weakness typeCWE-120CWE-120

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
TB-eye Ltd. XRN-410SN/TEfirmware versions Ver2.47b_220119153805 and earlier—
TB-eye Ltd. XRN-810SN/TEfirmware versions Ver2.47b_220119153805 and earlier—
TB-eye Ltd. XRN-1610SN/TEfirmware versions Ver2.47b_210516234524 and earlier—
TB-eye Ltd. PRN-4011N/TEfirmware versions Ver2.51p_231208081715 and earlier—
TB-eye Ltd. HRX-421FN/TEfirmware versions Ver3.05.62 and earlier—
TB-eye Ltd. HRX-821/TEfirmware versions Ver3.05.62 and earlier—
TB-eye Ltd. HRX-1621/TEfirmware versions Ver3.05.62 and earlier—
TB-eye Ltd. HRX-435FN/TEfirmware versions Ver5.31.72 and earlier—
TB-eye Ltd. HRX-835/TEfirmware versions Ver5.31.72 and earlier—
TB-eye Ltd. HRX-1635/TEfirmware versions Ver5.31.72 and earlier—
TB-eye Ltd. XRN-425SFN/TEfirmware versions Ver5.31.32 and earlier—
TB-eye Ltd. XRN-426Sfirmware versions Ver5.33.12 and earlier—
TB-eye Ltd. XRN-820S/TEfirmware versions Ver5.34.12 and earlier—
TB-eye Ltd. XRN-1620S/TEfirmware versions Ver5.34.12 and earlier—
TB-eye Ltd. XRN-3210R/TEfirmware versions Ver5.34.12 and earlier—
TB-eye Ltd. XRN-6410R/TEfirmware versions Ver5.34.12 and earlier—
TB-eye Ltd. XRN-6410DR/TEfirmware versions Ver5.34.12 and earlier—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.