Skip to content
OpenAdvisories

Vendor

AVTECH

9 known vulnerabilities.

Products

IP camera, DVR, and NVR Devices 5 DVR devices 3 IP cameras 2 NVR devices 2 AVM1203 (IP Camera) 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-34056

    AVTECH IP camera, DVR, and NVR Devices Authenticated Root Command Execution

    An OS command injection vulnerability exists in AVTECH IP camera, DVR, and NVR devices via the PwdGrp.cgi endpoint, which handles user and group management operations. Authenticated users can supply input through the pwd or grp parameters, which are directly …

    AVTECH IP camera, DVR, and NVR Devices
  • Critical 9.4
    CVE-2025-34055

    AVTECH IP camera, DVR, and NVR Devices Authenticated Root Command Execution

    An OS command injection vulnerability exists in AVTECH DVR, NVR, and IP camera devices within the adcommand.cgi endpoint, which interfaces with the ActionD daemon. Authenticated users can invoke the DoShellCmd operation, passing arbitrary input via the strCmd…

    AVTECH IP camera, DVR, and NVR Devices
  • Critical 10.0
    CVE-2025-34054

    AVTECH IP camera, DVR, and NVR Devices Unauthenticated Command Injection

    An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgi_query. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing com…

    AVTECH IP camera, DVR, and NVR Devices