CVE-2025-34054

AVTECH IP camera, DVR, and NVR Devices Unauthenticated Command Injection

State: Published
Severity: 10.0 Critical
Published: Jul 1, 2025
Updated: Apr 7, 2026
Reserved: Apr 15, 2025

Description

An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgi_query. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing commands as root. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-04 UTC.

Scores

CVSS	Score	Vector	Source
4.0	10.0 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H	VulnCheck

Weaknesses

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

Product	Versions
IP camera, DVR, and NVR DevicesAVTECH	1008-1002-1005-1000Affected 1009-1003-1006-1001Affected 1009Y-1003Y-1006Y-1001YAffected 1010-1004-1007-1001Affected 1011-1005-1008-1002Affected 1014-1005-1009-1002Affected 1015-1006-1010-1003Affected 1016-1007-1011-1003Affected 1017-1008-1012-1002Affected 1017Y-1008Y-1012Y-1002YAffected 1018-1008-1012-1004Affected 1019-1009-1013-1003Affected 1019c-1012c-1014c-1001c-FFFFAffected 1022-1014-1016-1002-FFFFAffected 1022Y-1014Y-1016Y-1002Y-FFFFAffected 1023-1014-1017-1002-FFFFAffected

Product

Versions

IP camera, DVR, and NVR DevicesAVTECH

1008-1002-1005-1000Affected
1009-1003-1006-1001Affected
1009Y-1003Y-1006Y-1001YAffected
1010-1004-1007-1001Affected
1011-1005-1008-1002Affected
1014-1005-1009-1002Affected
1015-1006-1010-1003Affected
1016-1007-1011-1003Affected
1017-1008-1012-1002Affected
1017Y-1008Y-1012Y-1002YAffected
1018-1008-1012-1004Affected
1019-1009-1013-1003Affected
1019c-1012c-1014c-1001c-FFFFAffected
1022-1014-1016-1002-FFFFAffected
1022Y-1014Y-1016Y-1002Y-FFFFAffected
1023-1014-1017-1002-FFFFAffected

References

https://www.exploit-db.com/exploits/40500exploit
https://avtech.com/product
https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilitiesthird-party-advisorytechnical-description
https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECHexploit
https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulnsthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.