PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-47552 Digital zoom studio CVE debrief

A Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection, affecting versions from n/a through 12.37. This critical vulnerability has a CVSS score of 9.8. Defenders should assess potential exposure and impact, focusing on systems using DZS Video Gallery versions up to 12.37. The CVE record and NVD entry provide limited information about affected versions and potential impact. Further verification is required to determine the extent of exposure.

Vendor
Digital zoom studio
Product
DZS Video Gallery
CVSS
CRITICAL 9.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-01-07
Original CVE updated
2026-09-30
Advisory published
2026-01-07
Advisory updated
2026-09-30

Who should care

Defenders responsible for systems using DZS Video Gallery versions up to 12.37 should assess potential exposure and impact. This includes reviewing system configurations for potential vulnerabilities, monitoring for potential exploitation attempts, and verifying DZS Video Gallery version and exposure. Prioritization is crucial due to the critical severity of the vulnerability.

Why it matters

Defenders should prioritize verifying exposure and assessing potential impact due to a critical Deserialization of Untrusted Data vulnerability in DZS Video Gallery.

  • Potential object injection attacks
  • Possible system compromise through deserialization of untrusted data
  • Need for verification of DZS Video Gallery version and exposure

Technical summary

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection, affecting versions from n/a through 12.37. The vulnerability has a CVSS score of 9.8, indicating critical severity. Defenders should prioritize verifying exposure and assessing potential impact, focusing on systems using DZS Video Gallery versions up to 12.37.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact, focusing on systems using DZS Video Gallery versions up to 12.37.

Recommended defensive actions

  • Verify DZS Video Gallery version and assess exposure
  • Review system configurations for potential vulnerabilities
  • Monitor for potential exploitation attempts

Evidence notes

The CVE record and NVD entry provide limited information about affected versions and potential impact. Further verification is required to determine the extent of exposure.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-47552 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-47552

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-47552 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-47552

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.