CVE-2025-34053 (GCVE-0-2025-34053)
Vulnerability from cvelistv5
Published
2025-07-01 14:45
Modified
2025-07-01 18:46
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-290 - Authentication Bypass by Spoofing
Summary
An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function is used to identify ".cab" requests, allowing any URL containing ".cab" to bypass authentication and access protected endpoints.
References
| ► | URL | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| AVTECH | IP camera, DVR, and NVR devices |
Version: 1000-1000-1000-1000 Version: 1000C-1000C-1000C-1000C Version: 1001-1000-1000-1000 Version: 1001-1001-1000-1000 Version: 1002-1000-1000-1000 Version: 1002-1002-1000-1002 Version: 1002D-1000D-1000D-1000D Version: 1003-1000-1000-1001 Version: 1003-1001-1001-1000 Version: 1003-1002-1001-1000 Version: 1004-1000-1000-1000 Version: 1004-1001-1001-1001 Version: 1004-1003-1001-1002 Version: 1004-1003-1002-1001 Version: 1004A-1001A-1002A-1000A Version: 1005-1002-1001-1002 Version: 1005-1003-1001-1002 Version: 1005-1004-1002-1001 Version: 1005A-1001A-1002A-1001A Version: 1005D-1001D-1002D-1001D Version: 1006-1002-1001-1002 Version: 1006-1004-1003-1001 Version: 1007-1001-1003-1001 Version: 1007-1001-1004-1003 Version: 1007-1002-1001-1003 Version: 1007-1002-1003-1002 Version: 1007-1004-1003-1001 Version: 1008-1001-1003-1002 Version: 1008-1004-1004-1001 Version: 1008D-1003D-1004D-1002D Version: 1008J-1004J-1004J-1001J Version: 1009-1001-1004-1001 Version: 1009-1002-1005-1003 Version: 1009-1003-1005-1002 Version: 1010-1001-1004-1001 Version: 1010-1001-1004-1002 Version: 1010-1003-1005-1002 Version: 1010-1003-1006-1003 Version: 1010-1003-1006-1004 Version: 1010-1004-1007-1001 Version: 1010J-1001J-1004J-1001J Version: 1010N-1003N-1005N-1002N Version: 1011-1001-1002A-1002 Version: 1011-1001-1002D-1002 Version: 1011-1001-1003-1002 Version: 1011-1001-1004-1002 Version: 1011-1001-1005-1002 Version: 1011-1004-1005-1002 Version: 1012-1001-1005-1002 Version: 1012-1001-1005-1003 Version: 1012-1001-1005PO-1002 Version: 1012-1003-1007-1002 Version: 1012-1003-1007-1004 Version: 1013-1001-1005-1003 Version: 1013-1002-1006-1002 Version: 1013-1003-1008-1003 Version: 1013-1004-1008-1004 Version: 1013-1005-1005-1002 Version: 1013-1005-1007-1002 Version: 1013K-1005K-1007PO-1002K Version: 1014-1002-1006-1002 Version: 1014-1002-1006-1003 Version: 1014-1003-1008-1003 Version: 1014-1005-1008-1002 Version: 1014B-1002B-1006B-1002B Version: 1015-1001-1006-1003 Version: 1015-1002-1006-1003 Version: 1015-1002-1007-1002 Version: 1015-1003-1008-1003 Version: 1015-1005-1009-1004 Version: 1015-1006-1004-1002 Version: 1015-1006-1005-1002 Version: 1015-1006-1008-1002 Version: 1015C-1004C-1003C-1005C Version: 1015K-1006K-1008PO-1002K Version: 1016-1002-1007-1002 Version: 1016-1006-1013-1002 Version: 1016-1007-1009-1003 Version: 1016-1007-1011-1003 Version: 1017-1002-1007-1003 Version: 1017-1003-1007-1003 Version: 1017-1003-1009-1003 Version: 1017-1005-1004-1005 Version: 1017-1006-1013-1002 Version: 1017-1013-1014-1005 Version: 1018-1003-1005-1004 Version: 1018-1003-1008-1003 Version: 1018-1003-1008-1004 Version: 1018-1003-1008PO-1003 Version: 1018-1004-1005-1005 Version: 1018-1007-1009-1003 Version: 1018-1012-1011-1010 Version: 1019-1004-1006-1005 Version: 1019-1007-1009-1003 Version: 1020-1003-1008-1003 Version: 1020-1003-1008-1004 Version: 1020-1004-1007-1006 Version: 1020-1007-1008-1003 Version: 1020-1007-1009-1003 Version: 1021-1003-1008-1003 Version: 1021-1003-1008-1004 Version: 1021-1005-1006-1005 Version: 1021-1005-1008-1006 Version: 1021-1006-1015-1002 Version: 1021-1007-1010-1003 Version: 1022-1005-1007-1005 Version: 1022-1005-1009-1007 Version: 1022-1006-1015-1002 Version: 1022-1013-1014-1010 Version: 1022-1014-1016-1002-FFFF Version: 1022Y-1014Y-1016Y-1002Y-FFFF Version: 1023-1005-1008-1006 Version: 1023-1007-1016-1003 Version: 1024-1019-1019-1007 Version: 1025-1006-1010-1007 Version: 1025-1017-1017-1011 Version: 1027-1007-1019-1003 Version: 1027-1021-1021-1008 Version: 1028-1021-1022-1008 Version: 1031-1007-1022-1003 Version: 1032-1022-1024-1008 Version: 1033-1018-1021-1012 Version: 1035-1005-1005-1004 Version: 1035-1005-1005-1005 Version: 1035-1005-1005-1005P Version: 1035-1007-1024-1003 Version: 1035-1024-1025-1008 Version: 1036-1005-1006-1005 Version: 1036-1007-1024-1003 Version: 1036-1014-1016-1016 Version: 1037-1024-1027-1008 Version: 1037-1025-1027-1008 Version: 1038-1021-1024-1012 Version: 1038-1021-1024-1012-A5 Version: 1038-1025-1028-1008 Version: 1039-1005-1008-1004 Version: 1039-1005-1008-1005 Version: 1039-1014-1017-1016 Version: 1039D-1014D-1017D-1016D Version: 1040-1026-1029-1008 Version: 1041-1005-1009-1005 Version: 1042-1026-1030-1008 Version: 1044-1026-1030-1008 Version: 1044-1026-1031-1008 Version: 1045-1015-1020-1018 Version: 1046-1027-1032-1008 Version: 1047-1027-1031-1008 Version: 1049-1027-1033-1008 Version: 1050-1027-1034-1008 Version: 1050-1027-1036-1008 Version: 1051-1027-1035-1008 Version: 1051CZ-1028-1037-1008 Version: 1052-1027-1034-1008 Version: 1052-1028-1038-1008 Version: 1052A-1028-1038A-1008 Version: 1054-1027-1036-1008 Version: 1054-1028-1036-1008 Version: 1055-1028-1036-1008 Version: 1056-1028-1037-1008 Version: 1058-1028-1039-1008 Version: 1062-1028-1041-1008 Version: 1065-1029-1043-1008 Version: 1068-1029-1043-1008 Version: 1069-1029-1043-1008 Version: 1071-1029-1044-1008 Version: 1077-1017-1035-1007 Version: 1077-1017-1035-1007-A6 Version: 1077-1017-1035-1007-D4 Version: 1077-1017-1035-1007-D705FF Version: 1078-1017-1036-1007 Version: 1078-1017-1036-1007-A6 Version: 1078-1017-1036-1007-D707FF Version: 1079-1017-1037-1007 Version: 1079-1017-1037-1007-D4 Version: 1W77-1W17-1W35-1W07-A6 Version: A077-1017-A035-1007 Version: A077-1017-A035-1007-A6 Version: A1035-1024-A1025-1008 Version: A1038-1025-A1028-1008-D4 Version: S681-S681-S681-S681 Version: S749-S749-S749-S749 Version: S818-S818-S818-S818 Version: S820-S820-S820-S820 Version: S823-S823-S823-S823 Version: S914V-S914V-S914V-S914V Version: S984-S984-S984-S984 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-34053",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-07-01T18:46:03.365792Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-07-01T18:46:09.474Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"streamd web server",
"request URL parameter"
],
"product": "IP camera, DVR, and NVR devices",
"vendor": "AVTECH",
"versions": [
{
"status": "affected",
"version": "1000-1000-1000-1000"
},
{
"status": "affected",
"version": "1000C-1000C-1000C-1000C"
},
{
"status": "affected",
"version": "1001-1000-1000-1000"
},
{
"status": "affected",
"version": "1001-1001-1000-1000"
},
{
"status": "affected",
"version": "1002-1000-1000-1000"
},
{
"status": "affected",
"version": "1002-1002-1000-1002"
},
{
"status": "affected",
"version": "1002D-1000D-1000D-1000D"
},
{
"status": "affected",
"version": "1003-1000-1000-1001"
},
{
"status": "affected",
"version": "1003-1001-1001-1000"
},
{
"status": "affected",
"version": "1003-1002-1001-1000"
},
{
"status": "affected",
"version": "1004-1000-1000-1000"
},
{
"status": "affected",
"version": "1004-1001-1001-1001"
},
{
"status": "affected",
"version": "1004-1003-1001-1002"
},
{
"status": "affected",
"version": "1004-1003-1002-1001"
},
{
"status": "affected",
"version": "1004A-1001A-1002A-1000A"
},
{
"status": "affected",
"version": "1005-1002-1001-1002"
},
{
"status": "affected",
"version": "1005-1003-1001-1002"
},
{
"status": "affected",
"version": "1005-1004-1002-1001"
},
{
"status": "affected",
"version": "1005A-1001A-1002A-1001A"
},
{
"status": "affected",
"version": "1005D-1001D-1002D-1001D"
},
{
"status": "affected",
"version": "1006-1002-1001-1002"
},
{
"status": "affected",
"version": "1006-1004-1003-1001"
},
{
"status": "affected",
"version": "1007-1001-1003-1001"
},
{
"status": "affected",
"version": "1007-1001-1004-1003"
},
{
"status": "affected",
"version": "1007-1002-1001-1003"
},
{
"status": "affected",
"version": "1007-1002-1003-1002"
},
{
"status": "affected",
"version": "1007-1004-1003-1001"
},
{
"status": "affected",
"version": "1008-1001-1003-1002"
},
{
"status": "affected",
"version": "1008-1004-1004-1001"
},
{
"status": "affected",
"version": "1008D-1003D-1004D-1002D"
},
{
"status": "affected",
"version": "1008J-1004J-1004J-1001J"
},
{
"status": "affected",
"version": "1009-1001-1004-1001"
},
{
"status": "affected",
"version": "1009-1002-1005-1003"
},
{
"status": "affected",
"version": "1009-1003-1005-1002"
},
{
"status": "affected",
"version": "1010-1001-1004-1001"
},
{
"status": "affected",
"version": "1010-1001-1004-1002"
},
{
"status": "affected",
"version": "1010-1003-1005-1002"
},
{
"status": "affected",
"version": "1010-1003-1006-1003"
},
{
"status": "affected",
"version": "1010-1003-1006-1004"
},
{
"status": "affected",
"version": "1010-1004-1007-1001"
},
{
"status": "affected",
"version": "1010J-1001J-1004J-1001J"
},
{
"status": "affected",
"version": "1010N-1003N-1005N-1002N"
},
{
"status": "affected",
"version": "1011-1001-1002A-1002"
},
{
"status": "affected",
"version": "1011-1001-1002D-1002"
},
{
"status": "affected",
"version": "1011-1001-1003-1002"
},
{
"status": "affected",
"version": "1011-1001-1004-1002"
},
{
"status": "affected",
"version": "1011-1001-1005-1002"
},
{
"status": "affected",
"version": "1011-1004-1005-1002"
},
{
"status": "affected",
"version": "1012-1001-1005-1002"
},
{
"status": "affected",
"version": "1012-1001-1005-1003"
},
{
"status": "affected",
"version": "1012-1001-1005PO-1002"
},
{
"status": "affected",
"version": "1012-1003-1007-1002"
},
{
"status": "affected",
"version": "1012-1003-1007-1004"
},
{
"status": "affected",
"version": "1013-1001-1005-1003"
},
{
"status": "affected",
"version": "1013-1002-1006-1002"
},
{
"status": "affected",
"version": "1013-1003-1008-1003"
},
{
"status": "affected",
"version": "1013-1004-1008-1004"
},
{
"status": "affected",
"version": "1013-1005-1005-1002"
},
{
"status": "affected",
"version": "1013-1005-1007-1002"
},
{
"status": "affected",
"version": "1013K-1005K-1007PO-1002K"
},
{
"status": "affected",
"version": "1014-1002-1006-1002"
},
{
"status": "affected",
"version": "1014-1002-1006-1003"
},
{
"status": "affected",
"version": "1014-1003-1008-1003"
},
{
"status": "affected",
"version": "1014-1005-1008-1002"
},
{
"status": "affected",
"version": "1014B-1002B-1006B-1002B"
},
{
"status": "affected",
"version": "1015-1001-1006-1003"
},
{
"status": "affected",
"version": "1015-1002-1006-1003"
},
{
"status": "affected",
"version": "1015-1002-1007-1002"
},
{
"status": "affected",
"version": "1015-1003-1008-1003"
},
{
"status": "affected",
"version": "1015-1005-1009-1004"
},
{
"status": "affected",
"version": "1015-1006-1004-1002"
},
{
"status": "affected",
"version": "1015-1006-1005-1002"
},
{
"status": "affected",
"version": "1015-1006-1008-1002"
},
{
"status": "affected",
"version": "1015C-1004C-1003C-1005C"
},
{
"status": "affected",
"version": "1015K-1006K-1008PO-1002K"
},
{
"status": "affected",
"version": "1016-1002-1007-1002"
},
{
"status": "affected",
"version": "1016-1006-1013-1002"
},
{
"status": "affected",
"version": "1016-1007-1009-1003"
},
{
"status": "affected",
"version": "1016-1007-1011-1003"
},
{
"status": "affected",
"version": "1017-1002-1007-1003"
},
{
"status": "affected",
"version": "1017-1003-1007-1003"
},
{
"status": "affected",
"version": "1017-1003-1009-1003"
},
{
"status": "affected",
"version": "1017-1005-1004-1005"
},
{
"status": "affected",
"version": "1017-1006-1013-1002"
},
{
"status": "affected",
"version": "1017-1013-1014-1005"
},
{
"status": "affected",
"version": "1018-1003-1005-1004"
},
{
"status": "affected",
"version": "1018-1003-1008-1003"
},
{
"status": "affected",
"version": "1018-1003-1008-1004"
},
{
"status": "affected",
"version": "1018-1003-1008PO-1003"
},
{
"status": "affected",
"version": "1018-1004-1005-1005"
},
{
"status": "affected",
"version": "1018-1007-1009-1003"
},
{
"status": "affected",
"version": "1018-1012-1011-1010"
},
{
"status": "affected",
"version": "1019-1004-1006-1005"
},
{
"status": "affected",
"version": "1019-1007-1009-1003"
},
{
"status": "affected",
"version": "1020-1003-1008-1003"
},
{
"status": "affected",
"version": "1020-1003-1008-1004"
},
{
"status": "affected",
"version": "1020-1004-1007-1006"
},
{
"status": "affected",
"version": "1020-1007-1008-1003"
},
{
"status": "affected",
"version": "1020-1007-1009-1003"
},
{
"status": "affected",
"version": "1021-1003-1008-1003"
},
{
"status": "affected",
"version": "1021-1003-1008-1004"
},
{
"status": "affected",
"version": "1021-1005-1006-1005"
},
{
"status": "affected",
"version": "1021-1005-1008-1006"
},
{
"status": "affected",
"version": "1021-1006-1015-1002"
},
{
"status": "affected",
"version": "1021-1007-1010-1003"
},
{
"status": "affected",
"version": "1022-1005-1007-1005"
},
{
"status": "affected",
"version": "1022-1005-1009-1007"
},
{
"status": "affected",
"version": "1022-1006-1015-1002"
},
{
"status": "affected",
"version": "1022-1013-1014-1010"
},
{
"status": "affected",
"version": "1022-1014-1016-1002-FFFF"
},
{
"status": "affected",
"version": "1022Y-1014Y-1016Y-1002Y-FFFF"
},
{
"status": "affected",
"version": "1023-1005-1008-1006"
},
{
"status": "affected",
"version": "1023-1007-1016-1003"
},
{
"status": "affected",
"version": "1024-1019-1019-1007"
},
{
"status": "affected",
"version": "1025-1006-1010-1007"
},
{
"status": "affected",
"version": "1025-1017-1017-1011"
},
{
"status": "affected",
"version": "1027-1007-1019-1003"
},
{
"status": "affected",
"version": "1027-1021-1021-1008"
},
{
"status": "affected",
"version": "1028-1021-1022-1008"
},
{
"status": "affected",
"version": "1031-1007-1022-1003"
},
{
"status": "affected",
"version": "1032-1022-1024-1008"
},
{
"status": "affected",
"version": "1033-1018-1021-1012"
},
{
"status": "affected",
"version": "1035-1005-1005-1004"
},
{
"status": "affected",
"version": "1035-1005-1005-1005"
},
{
"status": "affected",
"version": "1035-1005-1005-1005P"
},
{
"status": "affected",
"version": "1035-1007-1024-1003"
},
{
"status": "affected",
"version": "1035-1024-1025-1008"
},
{
"status": "affected",
"version": "1036-1005-1006-1005"
},
{
"status": "affected",
"version": "1036-1007-1024-1003"
},
{
"status": "affected",
"version": "1036-1014-1016-1016"
},
{
"status": "affected",
"version": "1037-1024-1027-1008"
},
{
"status": "affected",
"version": "1037-1025-1027-1008"
},
{
"status": "affected",
"version": "1038-1021-1024-1012"
},
{
"status": "affected",
"version": "1038-1021-1024-1012-A5"
},
{
"status": "affected",
"version": "1038-1025-1028-1008"
},
{
"status": "affected",
"version": "1039-1005-1008-1004"
},
{
"status": "affected",
"version": "1039-1005-1008-1005"
},
{
"status": "affected",
"version": "1039-1014-1017-1016"
},
{
"status": "affected",
"version": "1039D-1014D-1017D-1016D"
},
{
"status": "affected",
"version": "1040-1026-1029-1008"
},
{
"status": "affected",
"version": "1041-1005-1009-1005"
},
{
"status": "affected",
"version": "1042-1026-1030-1008"
},
{
"status": "affected",
"version": "1044-1026-1030-1008"
},
{
"status": "affected",
"version": "1044-1026-1031-1008"
},
{
"status": "affected",
"version": "1045-1015-1020-1018"
},
{
"status": "affected",
"version": "1046-1027-1032-1008"
},
{
"status": "affected",
"version": "1047-1027-1031-1008"
},
{
"status": "affected",
"version": "1049-1027-1033-1008"
},
{
"status": "affected",
"version": "1050-1027-1034-1008"
},
{
"status": "affected",
"version": "1050-1027-1036-1008"
},
{
"status": "affected",
"version": "1051-1027-1035-1008"
},
{
"status": "affected",
"version": "1051CZ-1028-1037-1008"
},
{
"status": "affected",
"version": "1052-1027-1034-1008"
},
{
"status": "affected",
"version": "1052-1028-1038-1008"
},
{
"status": "affected",
"version": "1052A-1028-1038A-1008"
},
{
"status": "affected",
"version": "1054-1027-1036-1008"
},
{
"status": "affected",
"version": "1054-1028-1036-1008"
},
{
"status": "affected",
"version": "1055-1028-1036-1008"
},
{
"status": "affected",
"version": "1056-1028-1037-1008"
},
{
"status": "affected",
"version": "1058-1028-1039-1008"
},
{
"status": "affected",
"version": "1062-1028-1041-1008"
},
{
"status": "affected",
"version": "1065-1029-1043-1008"
},
{
"status": "affected",
"version": "1068-1029-1043-1008"
},
{
"status": "affected",
"version": "1069-1029-1043-1008"
},
{
"status": "affected",
"version": "1071-1029-1044-1008"
},
{
"status": "affected",
"version": "1077-1017-1035-1007"
},
{
"status": "affected",
"version": "1077-1017-1035-1007-A6"
},
{
"status": "affected",
"version": "1077-1017-1035-1007-D4"
},
{
"status": "affected",
"version": "1077-1017-1035-1007-D705FF"
},
{
"status": "affected",
"version": "1078-1017-1036-1007"
},
{
"status": "affected",
"version": "1078-1017-1036-1007-A6"
},
{
"status": "affected",
"version": "1078-1017-1036-1007-D707FF"
},
{
"status": "affected",
"version": "1079-1017-1037-1007"
},
{
"status": "affected",
"version": "1079-1017-1037-1007-D4"
},
{
"status": "affected",
"version": "1W77-1W17-1W35-1W07-A6"
},
{
"status": "affected",
"version": "A077-1017-A035-1007"
},
{
"status": "affected",
"version": "A077-1017-A035-1007-A6"
},
{
"status": "affected",
"version": "A1035-1024-A1025-1008"
},
{
"status": "affected",
"version": "A1038-1025-A1028-1008-D4"
},
{
"status": "affected",
"version": "S681-S681-S681-S681"
},
{
"status": "affected",
"version": "S749-S749-S749-S749"
},
{
"status": "affected",
"version": "S818-S818-S818-S818"
},
{
"status": "affected",
"version": "S820-S820-S820-S820"
},
{
"status": "affected",
"version": "S823-S823-S823-S823"
},
{
"status": "affected",
"version": "S914V-S914V-S914V-S914V"
},
{
"status": "affected",
"version": "S984-S984-S984-S984"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gergely Eberhardt (SEARCH-LAB.hu)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices\u2019 streamd web server. The strstr() function is used to identify \".cab\" requests, allowing any URL containing \".cab\" to bypass authentication and access protected endpoints."
}
],
"value": "An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices\u2019 streamd web server. The strstr() function is used to identify \".cab\" requests, allowing any URL containing \".cab\" to bypass authentication and access protected endpoints."
}
],
"impacts": [
{
"capecId": "CAPEC-115",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-115 Authentication Bypass"
}
]
},
{
"capecId": "CAPEC-137",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-137 Parameter Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-290",
"description": "CWE-290 Authentication Bypass by Spoofing",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-07-01T14:45:02.858Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://www.exploit-db.com/exploits/40500"
},
{
"tags": [
"product"
],
"url": "https://avtech.com/"
},
{
"tags": [
"third-party-advisory",
"technical-description"
],
"url": "https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities"
},
{
"tags": [
"exploit"
],
"url": "https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "AVTECH IP camera, DVR, and NVR Devices Authentication Bypass via .cab Path Manipulation",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2025-34053",
"datePublished": "2025-07-01T14:45:02.858Z",
"dateReserved": "2025-04-15T19:15:22.548Z",
"dateUpdated": "2025-07-01T18:46:09.474Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-34053\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-07-01T18:46:03.365792Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-07-01T18:30:50.237Z\"}}], \"cna\": {\"title\": \"AVTECH IP camera, DVR, and NVR Devices Authentication Bypass via .cab Path Manipulation\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Gergely Eberhardt (SEARCH-LAB.hu)\"}], \"impacts\": [{\"capecId\": \"CAPEC-115\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-115 Authentication Bypass\"}]}, {\"capecId\": \"CAPEC-137\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-137 Parameter Injection\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 6.9, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"LOW\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"LOW\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"LOW\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"AVTECH\", \"modules\": [\"streamd web server\", \"request URL parameter\"], \"product\": \"IP camera, DVR, and NVR devices\", \"versions\": [{\"status\": \"affected\", \"version\": \"1000-1000-1000-1000\"}, {\"status\": \"affected\", \"version\": \"1000C-1000C-1000C-1000C\"}, {\"status\": \"affected\", \"version\": \"1001-1000-1000-1000\"}, {\"status\": \"affected\", \"version\": \"1001-1001-1000-1000\"}, {\"status\": \"affected\", \"version\": \"1002-1000-1000-1000\"}, {\"status\": \"affected\", \"version\": \"1002-1002-1000-1002\"}, {\"status\": \"affected\", \"version\": \"1002D-1000D-1000D-1000D\"}, {\"status\": \"affected\", \"version\": \"1003-1000-1000-1001\"}, {\"status\": \"affected\", \"version\": \"1003-1001-1001-1000\"}, {\"status\": \"affected\", \"version\": \"1003-1002-1001-1000\"}, {\"status\": \"affected\", \"version\": \"1004-1000-1000-1000\"}, {\"status\": \"affected\", \"version\": \"1004-1001-1001-1001\"}, {\"status\": \"affected\", \"version\": \"1004-1003-1001-1002\"}, {\"status\": \"affected\", \"version\": \"1004-1003-1002-1001\"}, {\"status\": \"affected\", \"version\": \"1004A-1001A-1002A-1000A\"}, {\"status\": \"affected\", \"version\": \"1005-1002-1001-1002\"}, {\"status\": \"affected\", \"version\": \"1005-1003-1001-1002\"}, {\"status\": \"affected\", \"version\": \"1005-1004-1002-1001\"}, {\"status\": \"affected\", \"version\": \"1005A-1001A-1002A-1001A\"}, {\"status\": \"affected\", \"version\": \"1005D-1001D-1002D-1001D\"}, {\"status\": \"affected\", \"version\": \"1006-1002-1001-1002\"}, {\"status\": \"affected\", \"version\": \"1006-1004-1003-1001\"}, {\"status\": \"affected\", \"version\": \"1007-1001-1003-1001\"}, {\"status\": \"affected\", \"version\": \"1007-1001-1004-1003\"}, {\"status\": \"affected\", \"version\": \"1007-1002-1001-1003\"}, {\"status\": \"affected\", \"version\": \"1007-1002-1003-1002\"}, {\"status\": \"affected\", \"version\": \"1007-1004-1003-1001\"}, {\"status\": \"affected\", \"version\": \"1008-1001-1003-1002\"}, {\"status\": \"affected\", \"version\": \"1008-1004-1004-1001\"}, {\"status\": \"affected\", \"version\": \"1008D-1003D-1004D-1002D\"}, {\"status\": \"affected\", \"version\": \"1008J-1004J-1004J-1001J\"}, {\"status\": \"affected\", \"version\": \"1009-1001-1004-1001\"}, {\"status\": \"affected\", \"version\": \"1009-1002-1005-1003\"}, {\"status\": \"affected\", \"version\": \"1009-1003-1005-1002\"}, {\"status\": \"affected\", \"version\": \"1010-1001-1004-1001\"}, {\"status\": \"affected\", \"version\": \"1010-1001-1004-1002\"}, {\"status\": \"affected\", \"version\": \"1010-1003-1005-1002\"}, {\"status\": \"affected\", \"version\": \"1010-1003-1006-1003\"}, {\"status\": \"affected\", \"version\": \"1010-1003-1006-1004\"}, {\"status\": \"affected\", \"version\": \"1010-1004-1007-1001\"}, {\"status\": \"affected\", \"version\": \"1010J-1001J-1004J-1001J\"}, {\"status\": \"affected\", \"version\": \"1010N-1003N-1005N-1002N\"}, {\"status\": \"affected\", \"version\": \"1011-1001-1002A-1002\"}, {\"status\": \"affected\", \"version\": \"1011-1001-1002D-1002\"}, {\"status\": \"affected\", \"version\": \"1011-1001-1003-1002\"}, {\"status\": \"affected\", \"version\": \"1011-1001-1004-1002\"}, {\"status\": \"affected\", \"version\": \"1011-1001-1005-1002\"}, {\"status\": \"affected\", \"version\": \"1011-1004-1005-1002\"}, {\"status\": \"affected\", \"version\": \"1012-1001-1005-1002\"}, {\"status\": \"affected\", \"version\": \"1012-1001-1005-1003\"}, {\"status\": \"affected\", \"version\": \"1012-1001-1005PO-1002\"}, {\"status\": \"affected\", \"version\": \"1012-1003-1007-1002\"}, {\"status\": \"affected\", \"version\": \"1012-1003-1007-1004\"}, {\"status\": \"affected\", \"version\": \"1013-1001-1005-1003\"}, {\"status\": \"affected\", \"version\": \"1013-1002-1006-1002\"}, {\"status\": \"affected\", \"version\": \"1013-1003-1008-1003\"}, {\"status\": \"affected\", \"version\": \"1013-1004-1008-1004\"}, {\"status\": \"affected\", \"version\": \"1013-1005-1005-1002\"}, {\"status\": \"affected\", \"version\": \"1013-1005-1007-1002\"}, {\"status\": \"affected\", \"version\": \"1013K-1005K-1007PO-1002K\"}, {\"status\": \"affected\", \"version\": \"1014-1002-1006-1002\"}, {\"status\": \"affected\", \"version\": \"1014-1002-1006-1003\"}, {\"status\": \"affected\", \"version\": \"1014-1003-1008-1003\"}, {\"status\": \"affected\", \"version\": \"1014-1005-1008-1002\"}, {\"status\": \"affected\", \"version\": \"1014B-1002B-1006B-1002B\"}, {\"status\": \"affected\", \"version\": \"1015-1001-1006-1003\"}, {\"status\": \"affected\", \"version\": \"1015-1002-1006-1003\"}, {\"status\": \"affected\", \"version\": \"1015-1002-1007-1002\"}, {\"status\": \"affected\", \"version\": \"1015-1003-1008-1003\"}, {\"status\": \"affected\", \"version\": \"1015-1005-1009-1004\"}, {\"status\": \"affected\", \"version\": \"1015-1006-1004-1002\"}, {\"status\": \"affected\", \"version\": \"1015-1006-1005-1002\"}, {\"status\": \"affected\", \"version\": \"1015-1006-1008-1002\"}, {\"status\": \"affected\", \"version\": \"1015C-1004C-1003C-1005C\"}, {\"status\": \"affected\", \"version\": \"1015K-1006K-1008PO-1002K\"}, {\"status\": \"affected\", \"version\": \"1016-1002-1007-1002\"}, {\"status\": \"affected\", \"version\": \"1016-1006-1013-1002\"}, {\"status\": \"affected\", \"version\": \"1016-1007-1009-1003\"}, {\"status\": \"affected\", \"version\": \"1016-1007-1011-1003\"}, {\"status\": \"affected\", \"version\": \"1017-1002-1007-1003\"}, {\"status\": \"affected\", \"version\": \"1017-1003-1007-1003\"}, {\"status\": \"affected\", \"version\": \"1017-1003-1009-1003\"}, {\"status\": \"affected\", \"version\": \"1017-1005-1004-1005\"}, {\"status\": \"affected\", \"version\": \"1017-1006-1013-1002\"}, {\"status\": \"affected\", \"version\": \"1017-1013-1014-1005\"}, {\"status\": \"affected\", \"version\": \"1018-1003-1005-1004\"}, {\"status\": \"affected\", \"version\": \"1018-1003-1008-1003\"}, {\"status\": \"affected\", \"version\": \"1018-1003-1008-1004\"}, {\"status\": \"affected\", \"version\": \"1018-1003-1008PO-1003\"}, {\"status\": \"affected\", \"version\": \"1018-1004-1005-1005\"}, {\"status\": \"affected\", \"version\": \"1018-1007-1009-1003\"}, {\"status\": \"affected\", \"version\": \"1018-1012-1011-1010\"}, {\"status\": \"affected\", \"version\": \"1019-1004-1006-1005\"}, {\"status\": \"affected\", \"version\": \"1019-1007-1009-1003\"}, {\"status\": \"affected\", \"version\": \"1020-1003-1008-1003\"}, {\"status\": \"affected\", \"version\": \"1020-1003-1008-1004\"}, {\"status\": \"affected\", \"version\": \"1020-1004-1007-1006\"}, {\"status\": \"affected\", \"version\": \"1020-1007-1008-1003\"}, {\"status\": \"affected\", \"version\": \"1020-1007-1009-1003\"}, {\"status\": \"affected\", \"version\": \"1021-1003-1008-1003\"}, {\"status\": \"affected\", \"version\": \"1021-1003-1008-1004\"}, {\"status\": \"affected\", \"version\": \"1021-1005-1006-1005\"}, {\"status\": \"affected\", \"version\": \"1021-1005-1008-1006\"}, {\"status\": \"affected\", \"version\": \"1021-1006-1015-1002\"}, {\"status\": \"affected\", \"version\": \"1021-1007-1010-1003\"}, {\"status\": \"affected\", \"version\": \"1022-1005-1007-1005\"}, {\"status\": \"affected\", \"version\": \"1022-1005-1009-1007\"}, {\"status\": \"affected\", \"version\": \"1022-1006-1015-1002\"}, {\"status\": \"affected\", \"version\": \"1022-1013-1014-1010\"}, {\"status\": \"affected\", \"version\": \"1022-1014-1016-1002-FFFF\"}, {\"status\": \"affected\", \"version\": \"1022Y-1014Y-1016Y-1002Y-FFFF\"}, {\"status\": \"affected\", \"version\": \"1023-1005-1008-1006\"}, {\"status\": \"affected\", \"version\": \"1023-1007-1016-1003\"}, {\"status\": \"affected\", \"version\": \"1024-1019-1019-1007\"}, {\"status\": \"affected\", \"version\": \"1025-1006-1010-1007\"}, {\"status\": \"affected\", \"version\": \"1025-1017-1017-1011\"}, {\"status\": \"affected\", \"version\": \"1027-1007-1019-1003\"}, {\"status\": \"affected\", \"version\": \"1027-1021-1021-1008\"}, {\"status\": \"affected\", \"version\": \"1028-1021-1022-1008\"}, {\"status\": \"affected\", \"version\": \"1031-1007-1022-1003\"}, {\"status\": \"affected\", \"version\": \"1032-1022-1024-1008\"}, {\"status\": \"affected\", \"version\": \"1033-1018-1021-1012\"}, {\"status\": \"affected\", \"version\": \"1035-1005-1005-1004\"}, {\"status\": \"affected\", \"version\": \"1035-1005-1005-1005\"}, {\"status\": \"affected\", \"version\": \"1035-1005-1005-1005P\"}, {\"status\": \"affected\", \"version\": \"1035-1007-1024-1003\"}, {\"status\": \"affected\", \"version\": \"1035-1024-1025-1008\"}, {\"status\": \"affected\", \"version\": \"1036-1005-1006-1005\"}, {\"status\": \"affected\", \"version\": \"1036-1007-1024-1003\"}, {\"status\": \"affected\", \"version\": \"1036-1014-1016-1016\"}, {\"status\": \"affected\", \"version\": \"1037-1024-1027-1008\"}, {\"status\": \"affected\", \"version\": \"1037-1025-1027-1008\"}, {\"status\": \"affected\", \"version\": \"1038-1021-1024-1012\"}, {\"status\": \"affected\", \"version\": \"1038-1021-1024-1012-A5\"}, {\"status\": \"affected\", \"version\": \"1038-1025-1028-1008\"}, {\"status\": \"affected\", \"version\": \"1039-1005-1008-1004\"}, {\"status\": \"affected\", \"version\": \"1039-1005-1008-1005\"}, {\"status\": \"affected\", \"version\": \"1039-1014-1017-1016\"}, {\"status\": \"affected\", \"version\": \"1039D-1014D-1017D-1016D\"}, {\"status\": \"affected\", \"version\": \"1040-1026-1029-1008\"}, {\"status\": \"affected\", \"version\": \"1041-1005-1009-1005\"}, {\"status\": \"affected\", \"version\": \"1042-1026-1030-1008\"}, {\"status\": \"affected\", \"version\": \"1044-1026-1030-1008\"}, {\"status\": \"affected\", \"version\": \"1044-1026-1031-1008\"}, {\"status\": \"affected\", \"version\": \"1045-1015-1020-1018\"}, {\"status\": \"affected\", \"version\": \"1046-1027-1032-1008\"}, {\"status\": \"affected\", \"version\": \"1047-1027-1031-1008\"}, {\"status\": \"affected\", \"version\": \"1049-1027-1033-1008\"}, {\"status\": \"affected\", \"version\": \"1050-1027-1034-1008\"}, {\"status\": \"affected\", \"version\": \"1050-1027-1036-1008\"}, {\"status\": \"affected\", \"version\": \"1051-1027-1035-1008\"}, {\"status\": \"affected\", \"version\": \"1051CZ-1028-1037-1008\"}, {\"status\": \"affected\", \"version\": \"1052-1027-1034-1008\"}, {\"status\": \"affected\", \"version\": \"1052-1028-1038-1008\"}, {\"status\": \"affected\", \"version\": \"1052A-1028-1038A-1008\"}, {\"status\": \"affected\", \"version\": \"1054-1027-1036-1008\"}, {\"status\": \"affected\", \"version\": \"1054-1028-1036-1008\"}, {\"status\": \"affected\", \"version\": \"1055-1028-1036-1008\"}, {\"status\": \"affected\", \"version\": \"1056-1028-1037-1008\"}, {\"status\": \"affected\", \"version\": \"1058-1028-1039-1008\"}, {\"status\": \"affected\", \"version\": \"1062-1028-1041-1008\"}, {\"status\": \"affected\", \"version\": \"1065-1029-1043-1008\"}, {\"status\": \"affected\", \"version\": \"1068-1029-1043-1008\"}, {\"status\": \"affected\", \"version\": \"1069-1029-1043-1008\"}, {\"status\": \"affected\", \"version\": \"1071-1029-1044-1008\"}, {\"status\": \"affected\", \"version\": \"1077-1017-1035-1007\"}, {\"status\": \"affected\", \"version\": \"1077-1017-1035-1007-A6\"}, {\"status\": \"affected\", \"version\": \"1077-1017-1035-1007-D4\"}, {\"status\": \"affected\", \"version\": \"1077-1017-1035-1007-D705FF\"}, {\"status\": \"affected\", \"version\": \"1078-1017-1036-1007\"}, {\"status\": \"affected\", \"version\": \"1078-1017-1036-1007-A6\"}, {\"status\": \"affected\", \"version\": \"1078-1017-1036-1007-D707FF\"}, {\"status\": \"affected\", \"version\": \"1079-1017-1037-1007\"}, {\"status\": \"affected\", \"version\": \"1079-1017-1037-1007-D4\"}, {\"status\": \"affected\", \"version\": \"1W77-1W17-1W35-1W07-A6\"}, {\"status\": \"affected\", \"version\": \"A077-1017-A035-1007\"}, {\"status\": \"affected\", \"version\": \"A077-1017-A035-1007-A6\"}, {\"status\": \"affected\", \"version\": \"A1035-1024-A1025-1008\"}, {\"status\": \"affected\", \"version\": \"A1038-1025-A1028-1008-D4\"}, {\"status\": \"affected\", \"version\": \"S681-S681-S681-S681\"}, {\"status\": \"affected\", \"version\": \"S749-S749-S749-S749\"}, {\"status\": \"affected\", \"version\": \"S818-S818-S818-S818\"}, {\"status\": \"affected\", \"version\": \"S820-S820-S820-S820\"}, {\"status\": \"affected\", \"version\": \"S823-S823-S823-S823\"}, {\"status\": \"affected\", \"version\": \"S914V-S914V-S914V-S914V\"}, {\"status\": \"affected\", \"version\": \"S984-S984-S984-S984\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://www.exploit-db.com/exploits/40500\", \"tags\": [\"exploit\"]}, {\"url\": \"https://avtech.com/\", \"tags\": [\"product\"]}, {\"url\": \"https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities\", \"tags\": [\"third-party-advisory\", \"technical-description\"]}, {\"url\": \"https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH\", \"tags\": [\"exploit\"]}, {\"url\": \"https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns\", \"tags\": [\"third-party-advisory\"]}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices\\u2019 streamd web server. The strstr() function is used to identify \\\".cab\\\" requests, allowing any URL containing \\\".cab\\\" to bypass authentication and access protected endpoints.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices\\u2019 streamd web server. The strstr() function is used to identify \\\".cab\\\" requests, allowing any URL containing \\\".cab\\\" to bypass authentication and access protected endpoints.\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-290\", \"description\": \"CWE-290 Authentication Bypass by Spoofing\"}]}], \"providerMetadata\": {\"orgId\": \"83251b91-4cc7-4094-a5c7-464a1b83ea10\", \"shortName\": \"VulnCheck\", \"dateUpdated\": \"2025-07-01T14:45:02.858Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-34053\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-07-01T18:46:09.474Z\", \"dateReserved\": \"2025-04-15T19:15:22.548Z\", \"assignerOrgId\": \"83251b91-4cc7-4094-a5c7-464a1b83ea10\", \"datePublished\": \"2025-07-01T14:45:02.858Z\", \"assignerShortName\": \"VulnCheck\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…