PT-2025-27535 · Avtech · Avtech Dvr

Gergely Eberhardt · Published 2025-07-01 · Updated 2025-07-01 · CVE-2025-34051

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions: AVTECH DVR devices (affected versions not specified)

Description: A server-side request forgery issue exists in AVTECH DVR devices, exposing the "/cgi-bin/nobody/Search.cgi?action=cgi query" endpoint without authentication. An attacker can manipulate the ip, port, and queryb64str parameters to make arbitrary HTTP requests from the DVR to internal or external systems, potentially exposing sensitive data or interacting with internal services.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

SSRF

Weakness Enumeration

CWE-200

CWE-918

Related Identifiers

CVE-2025-34051

Affected Products

Avtech Dvr

References · 8

• 🔥 https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH · Exploit
• 🔥 https://exploit-db.com/exploits/40500 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34051 · Security Note
• https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns · Note
• https://avtech.com · Note
• https://twitter.com/CVEnew/status/1940067225999724827 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1940132967935807550 · Twitter Post
• https://web.archive.org/web/20240810225729/https://search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities · Note