Vulnerability in Avtech Ip Camera, Dvr, And Nvr Devices
CVE-2025-34065
An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls.
EPSS: 0.005 (42.2th percentile) — read the EPSS interpretation.
Affected products
- Avtech Ip Camera, Dvr, And Nvr Devices — versions 1000-1000-1000-1000, 1000C-1000C-1000C-1000C, 1001-1000-1000-1000
Weakness classification (CWE)
Public proof-of-concept exploits
References
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (technical-description, third-party-advisory)
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (third-party-advisory)
Frequently asked questions
- What is CVE-2025-34065?
- CVE-2025-34065 is a vulnerability in Avtech Ip Camera, Dvr, And Nvr Devices, classified under Authentication Bypass by Spoofing. Published 2025-07-01.
- Is CVE-2025-34065 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.