Skip to content
OpenAdvisories

Product · AVTECH

IP camera, DVR, and NVR Devices

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-34065 Public exploit

    AVTECH IP camera, DVR, and NVR Devices Authentication Bypass via /nobody URL Path

    An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls.

    AVTECH IP camera, DVR, and NVR Devices
  • Medium 6.9
    CVE-2025-34053

    AVTECH IP camera, DVR, and NVR Devices Authentication Bypass via .cab Path Manipulation

    An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function is used to identify ".cab" requests, allowing any URL containing ".cab" to bypass authentication and access protected endpoints.

    AVTECH IP camera, DVR, and NVR Devices