PT-2025-27539 · Avtech · Avtech Dvr+2

Gergely Eberhardt

·

Published

2025-07-01

·

Updated

2025-07-04

·

CVE-2025-34055

CVSS v4.0

9.4

Critical

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions: AVTECH DVR, NVR, and IP camera devices (affected versions not specified)
Description: An OS command injection issue exists within the "adcommand.cgi" endpoint, which interfaces with the ActionD daemon. Authenticated users can invoke the DoShellCmd operation, passing arbitrary input via the strCmd parameter. This input is executed directly by the system shell without sanitation, allowing attackers to execute commands as the root user.
Recommendations: As a temporary workaround, consider restricting access to the "adcommand.cgi" endpoint to minimize the risk of exploitation. Avoid using the strCmd parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

OS Command Injection

RCE

Weakness Enumeration

Related Identifiers

BDU:2025-11526
CVE-2025-34055

Affected Products

Avtech Dvr
Avtech Ip Cameras
Avtech Nvr