Vulnerability · Published Jul 1, 2025 · Assigned by VulnCheck

CVE-2025-34051AVTECH DVR Devices Server-Side Request Forgery

Medium 6.9

In plain English

A medium-severity server-side request forgery in DVR devices from AVTECH. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).

Severity (CVSS 4.0)6.9Medium

Exploit odds (30 days)0.6%top 51.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A server-side request forgery vulnerability exists in multiple firmware versions of AVTECH DVR devices that exposes the /cgi-bin/nobody/Search.cgi?action=cgi_query endpoint without authentication. An attacker can manipulate the ip, port, and queryb64str parameters to make arbitrary HTTP requests from the DVR to internal or external systems, potentially exposing sensitive data or interacting with internal services.

Affected products (as reported)

Vendor	Product	Versions
AVTECH	DVR devices	1001-1000-1000-10001001-1000-1001-10011002-1000-1002-10011002-1001-1001-10011004-1002-1001-10001004-1002-1003-1000-FFFF1004V-1002V-1003V-1001V

Weakness: CWE-918, CWE-200 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L

References

https://www.exploit-db.com/exploits/40500 exploit
https://avtech.com/ product
https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities third-party-advisory, technical-description
https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH exploit
https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns third-party-advisory