by Kastro
Paper/Archive/CVE-2025-34056

CVE-2025-34056

AVTECH IP camera, DVR, and NVR Devices — AVTECH IP camera, DVR, and NVR Devices Authenticated Root Command Execution

EPSS 2%public exploitCVSS 9.4
critical.is priorityof 100
54
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 79.0.789 × 2015.8Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

An OS command injection vulnerability exists in AVTECH IP camera, DVR, and NVR devices via the PwdGrp.cgi endpoint, which handles user and group management operations. Authenticated users can supply input through the pwd or grp parameters, which are directly embedded into system commands without proper sanitation. This allows for the execution of arbitrary shell commands with root privileges.

Affected

ProductAffectedFixed inSource
IP camera, DVR, and NVR Devicesall versions–CNA

Scores by source

VulnCheck (CNA)9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitexploit-db.com/exploits/40500refavtech.comwriteupweb.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilitiesexploitweb.archive.org/web/20161029201749/https://github.com/ebux/AVTECHwriteupvulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns