This vulnerability (CVE-2025-47552) affects DZS Video Gallery by Digital zoom studio and is classified as CWE-502: Deserialization of Untrusted Data. It allows an attacker to perform object injection via unsafe deserialization, potentially leading to full compromise of the affected system. The issue impacts versions up to 12.37. The CVSS v3.1 base score is 9.8, reflecting network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available, and the product is not a cloud service.

Successful exploitation of this vulnerability can lead to complete compromise of the affected system, including unauthorized disclosure, modification, or destruction of data, and disruption of service. The critical CVSS score of 9.8 reflects the severity of these impacts. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are available, users should monitor vendor communications closely. Until a patch is released, consider restricting access to the affected application and applying any available workarounds recommended by the vendor once published.