CVE-2025-34053
6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Summary
An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function is used to identify ".cab" requests, allowing any URL containing ".cab" to bypass authentication and access protected endpoints.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| AVTECH | IP camera, DVR, and NVR devices | 1000-1000-1000-1000 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1000C-1000C-1000C-1000C | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1001-1000-1000-1000 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1001-1001-1000-1000 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1002-1000-1000-1000 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1002-1002-1000-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1002D-1000D-1000D-1000D | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1003-1000-1000-1001 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1003-1001-1001-1000 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1003-1002-1001-1000 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1004-1000-1000-1000 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1004-1001-1001-1001 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1004-1003-1001-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1004-1003-1002-1001 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1004A-1001A-1002A-1000A | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1005-1002-1001-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1005-1003-1001-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1005-1004-1002-1001 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1005A-1001A-1002A-1001A | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1005D-1001D-1002D-1001D | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1006-1002-1001-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1006-1004-1003-1001 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1007-1001-1003-1001 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1007-1001-1004-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1007-1002-1001-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1007-1002-1003-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1007-1004-1003-1001 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1008-1001-1003-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1008-1004-1004-1001 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1008D-1003D-1004D-1002D | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1008J-1004J-1004J-1001J | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1009-1001-1004-1001 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1009-1002-1005-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1009-1003-1005-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1010-1001-1004-1001 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1010-1001-1004-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1010-1003-1005-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1010-1003-1006-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1010-1003-1006-1004 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1010-1004-1007-1001 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1010J-1001J-1004J-1001J | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1010N-1003N-1005N-1002N | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1011-1001-1002A-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1011-1001-1002D-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1011-1001-1003-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1011-1001-1004-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1011-1001-1005-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1011-1004-1005-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1012-1001-1005-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1012-1001-1005-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1012-1001-1005PO-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1012-1003-1007-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1012-1003-1007-1004 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1013-1001-1005-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1013-1002-1006-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1013-1003-1008-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1013-1004-1008-1004 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1013-1005-1005-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1013-1005-1007-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1013K-1005K-1007PO-1002K | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1014-1002-1006-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1014-1002-1006-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1014-1003-1008-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1014-1005-1008-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1014B-1002B-1006B-1002B | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1015-1001-1006-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1015-1002-1006-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1015-1002-1007-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1015-1003-1008-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1015-1005-1009-1004 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1015-1006-1004-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1015-1006-1005-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1015-1006-1008-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1015C-1004C-1003C-1005C | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1015K-1006K-1008PO-1002K | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1016-1002-1007-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1016-1006-1013-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1016-1007-1009-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1016-1007-1011-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1017-1002-1007-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1017-1003-1007-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1017-1003-1009-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1017-1005-1004-1005 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1017-1006-1013-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1017-1013-1014-1005 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1018-1003-1005-1004 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1018-1003-1008-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1018-1003-1008-1004 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1018-1003-1008PO-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1018-1004-1005-1005 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1018-1007-1009-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1018-1012-1011-1010 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1019-1004-1006-1005 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1019-1007-1009-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1020-1003-1008-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1020-1003-1008-1004 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1020-1004-1007-1006 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1020-1007-1008-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1020-1007-1009-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1021-1003-1008-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1021-1003-1008-1004 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1021-1005-1006-1005 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1021-1005-1008-1006 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1021-1006-1015-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1021-1007-1010-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1022-1005-1007-1005 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1022-1005-1009-1007 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1022-1006-1015-1002 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1022-1013-1014-1010 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1022-1014-1016-1002-FFFF | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1022Y-1014Y-1016Y-1002Y-FFFF | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1023-1005-1008-1006 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1023-1007-1016-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1024-1019-1019-1007 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1025-1006-1010-1007 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1025-1017-1017-1011 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1027-1007-1019-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1027-1021-1021-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1028-1021-1022-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1031-1007-1022-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1032-1022-1024-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1033-1018-1021-1012 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1035-1005-1005-1004 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1035-1005-1005-1005 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1035-1005-1005-1005P | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1035-1007-1024-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1035-1024-1025-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1036-1005-1006-1005 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1036-1007-1024-1003 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1036-1014-1016-1016 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1037-1024-1027-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1037-1025-1027-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1038-1021-1024-1012 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1038-1021-1024-1012-A5 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1038-1025-1028-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1039-1005-1008-1004 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1039-1005-1008-1005 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1039-1014-1017-1016 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1039D-1014D-1017D-1016D | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1040-1026-1029-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1041-1005-1009-1005 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1042-1026-1030-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1044-1026-1030-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1044-1026-1031-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1045-1015-1020-1018 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1046-1027-1032-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1047-1027-1031-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1049-1027-1033-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1050-1027-1034-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1050-1027-1036-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1051-1027-1035-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1051CZ-1028-1037-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1052-1027-1034-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1052-1028-1038-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1052A-1028-1038A-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1054-1027-1036-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1054-1028-1036-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1055-1028-1036-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1056-1028-1037-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1058-1028-1039-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1062-1028-1041-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1065-1029-1043-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1068-1029-1043-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1069-1029-1043-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1071-1029-1044-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1077-1017-1035-1007 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1077-1017-1035-1007-A6 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1077-1017-1035-1007-D4 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1077-1017-1035-1007-D705FF | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1078-1017-1036-1007 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1078-1017-1036-1007-A6 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1078-1017-1036-1007-D707FF | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1079-1017-1037-1007 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1079-1017-1037-1007-D4 | affected |
| AVTECH | IP camera, DVR, and NVR devices | 1W77-1W17-1W35-1W07-A6 | affected |
| AVTECH | IP camera, DVR, and NVR devices | A077-1017-A035-1007 | affected |
| AVTECH | IP camera, DVR, and NVR devices | A077-1017-A035-1007-A6 | affected |
| AVTECH | IP camera, DVR, and NVR devices | A1035-1024-A1025-1008 | affected |
| AVTECH | IP camera, DVR, and NVR devices | A1038-1025-A1028-1008-D4 | affected |
| AVTECH | IP camera, DVR, and NVR devices | S681-S681-S681-S681 | affected |
| AVTECH | IP camera, DVR, and NVR devices | S749-S749-S749-S749 | affected |
| AVTECH | IP camera, DVR, and NVR devices | S818-S818-S818-S818 | affected |
| AVTECH | IP camera, DVR, and NVR devices | S820-S820-S820-S820 | affected |
| AVTECH | IP camera, DVR, and NVR devices | S823-S823-S823-S823 | affected |
| AVTECH | IP camera, DVR, and NVR devices | S914V-S914V-S914V-S914V | affected |
| AVTECH | IP camera, DVR, and NVR devices | S984-S984-S984-S984 | affected |
Weaknesses
- CWE-290: CWE-290 Authentication Bypass by Spoofing
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: poc
- Automatable: no
- Technical Impact: partial
References
- https://www.exploit-db.com/exploits/40500
- https://avtech.com/
- https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities
- https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH
- https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.