Avtech - vulnerabilities (CVEs)

21 CVEs in 18 products, 0 in the last 30 days, newest from 2025-12-03.

Products

And Nvr Devices - 5 CVEs
Dgm1104 Firmware - 5 CVEs
Dvr - 5 CVEs
Ip Camera - 5 CVEs
Avn801 Dvr Firmware - 3 CVEs
Dvr Devices - 3 CVEs
Avn801 Dvr - 2 CVEs
Eagleeyes(lite) - 2 CVEs
Ip Cameras - 2 CVEs
Nvr Devices - 2 CVEs
Avm1203 Firmware - 1 CVEs
Avm1203 Ip Camera - 1 CVEs
Pager Enterprise - 1 CVEs
Room Alert 3e Firmware - 1 CVEs
Avm1203 - 0 CVEs
Dgm1104 - 0 CVEs
Room Alert 3e - 0 CVEs
Tempager 4e - 0 CVEs

Newest CVEs of Avtech

CVE-2025-57202 - CVSS 6.1 (medium), 2025-12-03: A stored cross-site scripting (XSS) vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows…
CVE-2025-57201 - CVSS 8.8 (high), 2025-12-03: AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server…
CVE-2025-57199 - CVSS 8.8 (high), 2025-12-03: AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the…
CVE-2025-57198 - CVSS 8.8 (high), 2025-12-03: AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi…
CVE-2025-57200 - CVSS 6.5 (medium), 2025-12-03: AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the test_mail…
CVE-2025-50944 - CVSS 8.8 (high), 2025-09-15: An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0. The custom X509TrustManager…
CVE-2025-46408 - CVSS 9.8 (critical), 2025-09-15: An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH…
CVE-2025-34066 - CVSS 8.3 (high), 2025-07-01: An improper certificate validation vulnerability exists in AVTECH IP cameras, DVRs, and NVRs due to the use of wget with --no-check-certificate in scripts…
CVE-2025-34065 - CVSS 6.9 (medium), 2025-07-01: An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function allows unauthenticated…
CVE-2025-34056 - CVSS 9.4 (critical), 2025-07-01: An OS command injection vulnerability exists in AVTECH IP camera, DVR, and NVR devices via the PwdGrp.cgi endpoint, which handles user and group management…
CVE-2025-34055 - CVSS 9.4 (critical), 2025-07-01: An OS command injection vulnerability exists in AVTECH DVR, NVR, and IP camera devices within the adcommand.cgi endpoint, which interfaces with the ActionD…
CVE-2025-34053 - CVSS 6.9 (medium), 2025-07-01: An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function is used to identify ".cab"…
CVE-2025-34051 - CVSS 6.9 (medium), 2025-07-01: A server-side request forgery vulnerability exists in multiple firmware versions of AVTECH DVR devices that exposes the…
CVE-2025-34054 - CVSS 10 (critical), 2025-07-01: An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgi_query. The use of wget without input sanitization…
CVE-2025-34050 - CVSS 5.1 (medium), 2025-07-01: A cross-site request forgery (CSRF) vulnerability exists in the web interface of AVTECH IP camera, DVR, and NVR devices. An attacker can craft malicious…
CVE-2024-7029 - CVSS 9.8 (critical), 2024-08-02: Commands can be injected over the network and executed without authentication.
CVE-2013-4982 - CVSS 9.8 (critical), 2019-12-27: AVTECH AVN801 DVR has a security bypass via the administration login captcha
CVE-2019-13379 - CVSS 8.8 (high), 2019-07-07: On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to…
CVE-2013-4980 - CVSS 9 (critical), 2014-03-03: Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote…
CVE-2013-4981 - CVSS 9 (critical), 2014-03-03: Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote…
CVE-2008-3939 - CVSS 7.5 (high), 2008-09-05: Directory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers to read arbitrary files via directory…