PT-2025-27534 · Avtech · Avtech Dvr+2

Gergely Eberhardt · Published 2025-07-01 · Updated 2025-07-01 · CVE-2025-34050

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions: AVTECH IP camera, DVR, and NVR devices (affected versions not specified)

Description: A cross-site request forgery (CSRF) issue exists in the web interface of the devices. An attacker can craft malicious requests that, when executed in the context of an authenticated user’s browser session, allow unauthorized changes to the device configuration without user interaction.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BDU:2025-08211

CVE-2025-34050

Affected Products

Avtech Dvr

Avtech Ip Cameras

Avtech Nvr

References · 8

• 🔥 https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH · Exploit
• 🔥 https://exploit-db.com/exploits/40500 · Exploit
• https://bdu.fstec.ru/vul/2025-08211 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-34050 · Security Note
• https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns · Note
• https://avtech.com · Note
• https://twitter.com/CVEnew/status/1940067227094401292 · Twitter Post
• https://web.archive.org/web/20240810225729/https://search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities · Note