Skip to content
OpenAdvisories

Product · AVTECH

DVR devices

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-34051

    AVTECH DVR Devices Server-Side Request Forgery

    A server-side request forgery vulnerability exists in multiple firmware versions of AVTECH DVR devices that exposes the /cgi-bin/nobody/Search.cgi?action=cgi_query endpoint without authentication. An attacker can manipulate the ip, port, and queryb64str param…

    AVTECH DVR devices
  • Medium 5.1
    CVE-2025-34050

    AVTECH IP Camera, DVR, and NVR Devices Cross-Site Request Forgery

    A cross-site request forgery (CSRF) vulnerability exists in the web interface of AVTECH IP camera, DVR, and NVR devices. An attacker can craft malicious requests that, when executed in the context of an authenticated user’s browser session, allow unauthorized…

    AVTECH DVR devices IP cameras NVR devices