Skip to content
OpenAdvisories

Vendor

AVTECH

9 known vulnerabilities.

Products

IP camera, DVR, and NVR Devices 5 DVR devices 3 IP cameras 2 NVR devices 2 AVM1203 (IP Camera) 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-34065 Public exploit

    AVTECH IP camera, DVR, and NVR Devices Authentication Bypass via /nobody URL Path

    An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls.

    AVTECH IP camera, DVR, and NVR Devices
  • Medium 6.9
    CVE-2025-34053

    AVTECH IP camera, DVR, and NVR Devices Authentication Bypass via .cab Path Manipulation

    An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function is used to identify ".cab" requests, allowing any URL containing ".cab" to bypass authentication and access protected endpoints.

    AVTECH IP camera, DVR, and NVR Devices
  • Medium 6.9
    CVE-2025-34051

    AVTECH DVR Devices Server-Side Request Forgery

    A server-side request forgery vulnerability exists in multiple firmware versions of AVTECH DVR devices that exposes the /cgi-bin/nobody/Search.cgi?action=cgi_query endpoint without authentication. An attacker can manipulate the ip, port, and queryb64str param…

    AVTECH DVR devices
  • Medium 5.1
    CVE-2025-34050

    AVTECH IP Camera, DVR, and NVR Devices Cross-Site Request Forgery

    A cross-site request forgery (CSRF) vulnerability exists in the web interface of AVTECH IP camera, DVR, and NVR devices. An attacker can craft malicious requests that, when executed in the context of an authenticated user’s browser session, allow unauthorized…

    AVTECH DVR devices IP cameras NVR devices