PT-2025-27539 · Avtech · Avtech Dvr+2
Gergely Eberhardt
·
Published
2025-07-01
·
Updated
2025-07-04
·
CVE-2025-34055
CVSS v4.0
9.4
Critical
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions:
AVTECH DVR, NVR, and IP camera devices (affected versions not specified)
Description:
An OS command injection issue exists within the "adcommand.cgi" endpoint, which interfaces with the ActionD daemon. Authenticated users can invoke the DoShellCmd operation, passing arbitrary input via the
strCmd parameter. This input is executed directly by the system shell without sanitation, allowing attackers to execute commands as the root user.Recommendations:
As a temporary workaround, consider restricting access to the "adcommand.cgi" endpoint to minimize the risk of exploitation.
Avoid using the
strCmd parameter in the affected endpoint until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
OS Command Injection
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Avtech Dvr
Avtech Ip Cameras
Avtech Nvr