Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-34051

AVTECH DVR Devices Server-Side Request Forgery

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

A server-side request forgery vulnerability exists in multiple firmware versions of AVTECH DVR devices that exposes the /cgi-bin/nobody/Search.cgi?action=cgi_query endpoint without authentication. An attacker can manipulate the ip, port, and queryb64str parameters to make arbitrary HTTP requests from the DVR to internal or external systems, potentially exposing sensitive data or interacting with internal services.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AVTECH DVR devices

Default version status: unaffected

  • 1001-1000-1000-1000affected
  • 1001-1000-1001-1001affected
  • 1002-1000-1002-1001affected
  • 1002-1001-1000-1000unaffected
  • 1002-1001-1001-1001affected
  • 1004-1002-1001-1000affected
  • 1004-1002-1003-1000-FFFFaffected
  • 1004V-1002V-1003V-1001Vaffected
  • 1004Y-1002Y-1001EJ-1000Yaffected
  • 1004Y-1002Y-1001Y-1000Yaffected
  • 1005-1002-1002-1000affected
  • 1005-1002-1004-1001affected
  • 1006-1001-1003-1004affected
  • 1006-1002-1003-1000affected
  • 1006Y-1002Y-1003Y-1000Yaffected
  • 1007-1002-1004-1000affected
  • 1007-1003-1003-1002affected
  • 1007-1003-1005-1001affected
  • 1007E-1003E-1005EJ-1001Eaffected
  • 1007V-1003V-1005V-1001Vaffected
  • 1007Y-1002Y-1004Y-1000Yaffected
  • 1008-1002-1005-1000affected
  • 1008-1004-1003-1002affected
  • 1009-1003-1005-1006affected
  • 1009-1003-1006-1001affected
  • 1009-1007-1007-1000-FFFFaffected
  • 1009Y-1003Y-1006Y-1001Yaffected
  • 1010-1004-1007-1001affected
  • 1010-1005-1005-1002affected
  • 1011-1004-1005-1006affected
  • 1011-1005-1007-1001affected
  • 1011-1005-1007EJ-1001affected
  • 1011-1005-1008-1002affected
  • 1012-1004-1005-1006affected
  • 1012-1005-1007-1002affected
  • 1012-1006-1007-1001affected
  • 1012-1008-1009-1000-FFFFaffected
  • 1014-1005-1009-1002affected
  • 1014-1007-1009-1001affected
  • 1014-1010-1010-1000-FFFFaffected
  • 1014Y-1007Y-1009Y-1001Yaffected
  • 1015-1006-1010-1003affected
  • 1015-1007-1007-1007affected
  • 1015-1007-1010-1001affected
  • 1015-1010-1011-1000-FFFFaffected
  • 1015Y-1007Y-1010Y-1001Yaffected
  • 1016-1007-1005-1001affected
  • 1016-1007-1011-1001affected
  • 1016-1007-1011-1003affected
  • 1016-1008-1007-1007affected
  • 1016Y-1007Y-1011Y-1001Yaffected
  • 1017-1008-1012-1002affected
  • 1017-1009-1008-1008affected
  • 1017-1011-1013-1001-FFFFaffected
  • 1017f-1011f-1013f-1001f-FFFFaffected
  • 1017Y-1008Y-1012Y-1002Yaffected
  • 1018-1008-1012-1004affected
  • 1019-1009-1013-1003affected
  • 1019-1010-1009-1009affected
  • 1019c-1012c-1014c-1001c-FFFFaffected
  • 1021-1011-1010-1009affected
  • 1022-1012-1011-1009affected
  • 1022-1014-1016-1002-FFFFaffected
  • 1022Y-1014Y-1016Y-1002Y-FFFFaffected
  • 1023-1013-1011-1009affected
  • 1023-1014-1017-1002-FFFFaffected
  • 1025-1014-1013-1009affected
  • 1026-1014-1014-1009affected
  • 1027-1014-1015-1009affected
  • S968-S968-S968-S968affected
  • V171P-V171P-V171P-V171Paffected
  • V189-V189-V189-V189affected

References