Vulnerability · Published Jul 1, 2025 · Assigned by VulnCheck

CVE-2025-34054AVTECH IP camera, DVR, and NVR Devices Unauthenticated Command Injection

Critical 10.0

In plain English

A critical-severity OS command injection in IP camera, DVR, and NVR Devices from AVTECH. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.7% (higher than 86% of all known vulnerabilities).

Severity (CVSS 4.0)10.0Critical

Exploit odds (30 days)2.7%top 13.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgi_query. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing commands as root. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-04 UTC.

Affected products (as reported)

Vendor	Product	Versions
AVTECH	IP camera, DVR, and NVR Devices	1008-1002-1005-10001009-1003-1006-10011009Y-1003Y-1006Y-1001Y1010-1004-1007-10011011-1005-1008-10021014-1005-1009-10021015-1006-1010-10031016-1007-1011-1003

Weakness: CWE-78 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References

https://www.exploit-db.com/exploits/40500 exploit
https://avtech.com/ product
https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities third-party-advisory, technical-description
https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH exploit
https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns third-party-advisory