RCE in Avtech Ip Camera, Dvr, And Nvr Devices
CVE-2025-34055
An OS command injection vulnerability exists in AVTECH DVR, NVR, and IP camera devices within the adcommand.cgi endpoint, which interfaces with the ActionD daemon. Authenticated users can invoke the DoShellCmd operation, passing arbitrary input via the strCmd parameter. This input is executed directly by the system shell without sanitation allowing attackers to execute commands as the root user.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
EPSS exploit prediction
EPSS: 0.015 (73.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 73rd percentile — 73.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.015 · newest: 0.015 · change: -0.000
Affected products
- Avtech Ip Camera, Dvr, And Nvr Devices — versions 1001-1000-1000-1000, 1002-1000-1000-1000, 1002-1001-1001-1001
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.exploit-db.com/exploits/40500 (exploit)
- avtech.com/ (product)
- web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVT… (technical-description, third-party-advisory)
- web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH (exploit)
- vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns (third-party-advisory)
Frequently asked questions
- What is CVE-2025-34055?
- CVE-2025-34055 is a vulnerability in Avtech Ip Camera, Dvr, And Nvr Devices, classified under Improper Input Validation. Published 2025-07-01.
- Is CVE-2025-34055 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.