Skip to content
OpenAdvisories

Product · AVTECH Security

IP Camera, NVR, and DVR Devices

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2016-15047

    AVTECH CloudSetup.cgi Authenticated Command Injection

    AVTECH devices that include the CloudSetup.cgi management endpoint are vulnerable to authenticated OS command injection. The `exefile` parameter in CloudSetup.cgi is passed to the underlying system command execution without proper validation or whitelisting. …

    AVTECH Security IP Camera, NVR, and DVR Devices