AVTECH IP camera, DVR, and NVR Devices Unauthenticated Command Injection
70Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actcvss 10epss 2.7%
from disclosure to weapon
Published on NVDJul 1
VulnCheckOct 22
exploitation probability
2.7%top 15% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgi_query. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing commands as root. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-04 UTC.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected products
AVTECH · IP camera, DVR, and NVR Devicespublic PoCs found — 2
cve_referenceweb.archive.org/web/20161029201749/https://github.com/ebux/AVTECHunverifiedcve_referencewww.exploit-db.com/exploits/40500unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://avtech.com/https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulnshttps://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECHhttps://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilitieshttps://www.exploit-db.com/exploits/40500