Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2025-34051

🗓️ 01 Jul 2025 14:44:22Reported by VulnCheckType 
cve
 cve🔗 web.nvd.nist.gov👁 31 Views🌐 WEB

Vulnerability in AVTECH DVR devices allows unauthorized HTTP requests to sensitive data endpoints

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
circl
Circl		CVE-2025-34051
1 Jul 202515:07
–circl
cnnvd
CNNVD		AVTECH DVR 安全漏洞
1 Jul 202500:00
–cnnvd
cvelist
Cvelist		CVE-2025-34051 AVTECH DVR Devices Server-Side Request Forgery
1 Jul 202514:44
–cvelist
euvd
EUVD		EUVD-2025-19631
3 Oct 202520:07
–euvd
nvd
NVD		CVE-2025-34051
1 Jul 202515:15
–nvd
openvas
OpenVAS		AVTECH Devices Multiple Vulnerabilities
18 Oct 201600:00
–openvas
ptsecurity
Positive Technologies		PT-2025-27535 · Avtech · Avtech Dvr
1 Jul 202500:00
–ptsecurity
redhatcve
RedhatCVE		CVE-2025-34051
3 Jul 202515:23
–redhatcve
vulncheck_kev
VulnCheck KEV		VulnCheck KEV: CVE-2025-34051
24 Jul 201800:00
–vulncheck_kev
vulnrichment
Vulnrichment		CVE-2025-34051 AVTECH DVR Devices Server-Side Request Forgery
1 Jul 202514:44
–vulnrichment
Rows per page
Vulners
Node
OR
avtechdvr_devicesMatch1001-1000-1000-1000
avtechdvr_devicesMatch1001-1000-1001-1001
avtechdvr_devicesMatch1002-1000-1002-1001
avtechdvr_devicesMatch1002-1001-1001-1001
avtechdvr_devicesMatch1004-1002-1001-1000
avtechdvr_devicesMatch1004-1002-1003-1000-ffff
avtechdvr_devicesMatch1004v-1002v-1003v-1001v
avtechdvr_devicesMatch1004y-1002y-1001ej-1000y
avtechdvr_devicesMatch1004y-1002y-1001y-1000y
avtechdvr_devicesMatch1005-1002-1002-1000
avtechdvr_devicesMatch1005-1002-1004-1001
avtechdvr_devicesMatch1006-1001-1003-1004
avtechdvr_devicesMatch1006-1002-1003-1000
avtechdvr_devicesMatch1006y-1002y-1003y-1000y
avtechdvr_devicesMatch1007-1002-1004-1000
avtechdvr_devicesMatch1007-1003-1003-1002
avtechdvr_devicesMatch1007-1003-1005-1001
avtechdvr_devicesMatch1007e-1003e-1005ej-1001e
avtechdvr_devicesMatch1007v-1003v-1005v-1001v
avtechdvr_devicesMatch1007y-1002y-1004y-1000y
avtechdvr_devicesMatch1008-1002-1005-1000
avtechdvr_devicesMatch1008-1004-1003-1002
avtechdvr_devicesMatch1009-1003-1005-1006
avtechdvr_devicesMatch1009-1003-1006-1001
avtechdvr_devicesMatch1009-1007-1007-1000-ffff
avtechdvr_devicesMatch1009y-1003y-1006y-1001y
avtechdvr_devicesMatch1010-1004-1007-1001
avtechdvr_devicesMatch1010-1005-1005-1002
avtechdvr_devicesMatch1011-1004-1005-1006
avtechdvr_devicesMatch1011-1005-1007-1001
avtechdvr_devicesMatch1011-1005-1007ej-1001
avtechdvr_devicesMatch1011-1005-1008-1002
avtechdvr_devicesMatch1012-1004-1005-1006
avtechdvr_devicesMatch1012-1005-1007-1002
avtechdvr_devicesMatch1012-1006-1007-1001
avtechdvr_devicesMatch1012-1008-1009-1000-ffff
avtechdvr_devicesMatch1014-1005-1009-1002
avtechdvr_devicesMatch1014-1007-1009-1001
avtechdvr_devicesMatch1014-1010-1010-1000-ffff
avtechdvr_devicesMatch1014y-1007y-1009y-1001y
avtechdvr_devicesMatch1015-1006-1010-1003
avtechdvr_devicesMatch1015-1007-1007-1007
avtechdvr_devicesMatch1015-1007-1010-1001
avtechdvr_devicesMatch1015-1010-1011-1000-ffff
avtechdvr_devicesMatch1015y-1007y-1010y-1001y
avtechdvr_devicesMatch1016-1007-1005-1001
avtechdvr_devicesMatch1016-1007-1011-1001
avtechdvr_devicesMatch1016-1007-1011-1003
avtechdvr_devicesMatch1016-1008-1007-1007
avtechdvr_devicesMatch1016y-1007y-1011y-1001y
avtechdvr_devicesMatch1017-1008-1012-1002
avtechdvr_devicesMatch1017-1009-1008-1008
avtechdvr_devicesMatch1017-1011-1013-1001-ffff
avtechdvr_devicesMatch1017f-1011f-1013f-1001f-ffff
avtechdvr_devicesMatch1017y-1008y-1012y-1002y
avtechdvr_devicesMatch1018-1008-1012-1004
avtechdvr_devicesMatch1019-1009-1013-1003
avtechdvr_devicesMatch1019-1010-1009-1009
avtechdvr_devicesMatch1019c-1012c-1014c-1001c-ffff
avtechdvr_devicesMatch1021-1011-1010-1009
avtechdvr_devicesMatch1022-1012-1011-1009
avtechdvr_devicesMatch1022-1014-1016-1002-ffff
avtechdvr_devicesMatch1022y-1014y-1016y-1002y-ffff
avtechdvr_devicesMatch1023-1013-1011-1009
avtechdvr_devicesMatch1023-1014-1017-1002-ffff
avtechdvr_devicesMatch1025-1014-1013-1009
avtechdvr_devicesMatch1026-1014-1014-1009
avtechdvr_devicesMatch1027-1014-1015-1009
avtechdvr_devicesMatchs968-s968-s968-s968
avtechdvr_devicesMatchv171p-v171p-v171p-v171p
avtechdvr_devicesMatchv189-v189-v189-v189
[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Search.cgi endpoint",
      "ip parameter",
      "port parameter",
      "queryb64str parameter"
    ],
    "product": "DVR devices",
    "vendor": "AVTECH",
    "versions": [
      {
        "status": "affected",
        "version": "1001-1000-1000-1000"
      },
      {
        "status": "affected",
        "version": "1001-1000-1001-1001"
      },
      {
        "status": "affected",
        "version": "1002-1000-1002-1001"
      },
      {
        "status": "unaffected",
        "version": "1002-1001-1000-1000"
      },
      {
        "status": "affected",
        "version": "1002-1001-1001-1001"
      },
      {
        "status": "affected",
        "version": "1004-1002-1001-1000"
      },
      {
        "status": "affected",
        "version": "1004-1002-1003-1000-FFFF"
      },
      {
        "status": "affected",
        "version": "1004V-1002V-1003V-1001V"
      },
      {
        "status": "affected",
        "version": "1004Y-1002Y-1001EJ-1000Y"
      },
      {
        "status": "affected",
        "version": "1004Y-1002Y-1001Y-1000Y"
      },
      {
        "status": "affected",
        "version": "1005-1002-1002-1000"
      },
      {
        "status": "affected",
        "version": "1005-1002-1004-1001"
      },
      {
        "status": "affected",
        "version": "1006-1001-1003-1004"
      },
      {
        "status": "affected",
        "version": "1006-1002-1003-1000"
      },
      {
        "status": "affected",
        "version": "1006Y-1002Y-1003Y-1000Y"
      },
      {
        "status": "affected",
        "version": "1007-1002-1004-1000"
      },
      {
        "status": "affected",
        "version": "1007-1003-1003-1002"
      },
      {
        "status": "affected",
        "version": "1007-1003-1005-1001"
      },
      {
        "status": "affected",
        "version": "1007E-1003E-1005EJ-1001E"
      },
      {
        "status": "affected",
        "version": "1007V-1003V-1005V-1001V"
      },
      {
        "status": "affected",
        "version": "1007Y-1002Y-1004Y-1000Y"
      },
      {
        "status": "affected",
        "version": "1008-1002-1005-1000"
      },
      {
        "status": "affected",
        "version": "1008-1004-1003-1002"
      },
      {
        "status": "affected",
        "version": "1009-1003-1005-1006"
      },
      {
        "status": "affected",
        "version": "1009-1003-1006-1001"
      },
      {
        "status": "affected",
        "version": "1009-1007-1007-1000-FFFF"
      },
      {
        "status": "affected",
        "version": "1009Y-1003Y-1006Y-1001Y"
      },
      {
        "status": "affected",
        "version": "1010-1004-1007-1001"
      },
      {
        "status": "affected",
        "version": "1010-1005-1005-1002"
      },
      {
        "status": "affected",
        "version": "1011-1004-1005-1006"
      },
      {
        "status": "affected",
        "version": "1011-1005-1007-1001"
      },
      {
        "status": "affected",
        "version": "1011-1005-1007EJ-1001"
      },
      {
        "status": "affected",
        "version": "1011-1005-1008-1002"
      },
      {
        "status": "affected",
        "version": "1012-1004-1005-1006"
      },
      {
        "status": "affected",
        "version": "1012-1005-1007-1002"
      },
      {
        "status": "affected",
        "version": "1012-1006-1007-1001"
      },
      {
        "status": "affected",
        "version": "1012-1008-1009-1000-FFFF"
      },
      {
        "status": "affected",
        "version": "1014-1005-1009-1002"
      },
      {
        "status": "affected",
        "version": "1014-1007-1009-1001"
      },
      {
        "status": "affected",
        "version": "1014-1010-1010-1000-FFFF"
      },
      {
        "status": "affected",
        "version": "1014Y-1007Y-1009Y-1001Y"
      },
      {
        "status": "affected",
        "version": "1015-1006-1010-1003"
      },
      {
        "status": "affected",
        "version": "1015-1007-1007-1007"
      },
      {
        "status": "affected",
        "version": "1015-1007-1010-1001"
      },
      {
        "status": "affected",
        "version": "1015-1010-1011-1000-FFFF"
      },
      {
        "status": "affected",
        "version": "1015Y-1007Y-1010Y-1001Y"
      },
      {
        "status": "affected",
        "version": "1016-1007-1005-1001"
      },
      {
        "status": "affected",
        "version": "1016-1007-1011-1001"
      },
      {
        "status": "affected",
        "version": "1016-1007-1011-1003"
      },
      {
        "status": "affected",
        "version": "1016-1008-1007-1007"
      },
      {
        "status": "affected",
        "version": "1016Y-1007Y-1011Y-1001Y"
      },
      {
        "status": "affected",
        "version": "1017-1008-1012-1002"
      },
      {
        "status": "affected",
        "version": "1017-1009-1008-1008"
      },
      {
        "status": "affected",
        "version": "1017-1011-1013-1001-FFFF"
      },
      {
        "status": "affected",
        "version": "1017f-1011f-1013f-1001f-FFFF"
      },
      {
        "status": "affected",
        "version": "1017Y-1008Y-1012Y-1002Y"
      },
      {
        "status": "affected",
        "version": "1018-1008-1012-1004"
      },
      {
        "status": "affected",
        "version": "1019-1009-1013-1003"
      },
      {
        "status": "affected",
        "version": "1019-1010-1009-1009"
      },
      {
        "status": "affected",
        "version": "1019c-1012c-1014c-1001c-FFFF"
      },
      {
        "status": "affected",
        "version": "1021-1011-1010-1009"
      },
      {
        "status": "affected",
        "version": "1022-1012-1011-1009"
      },
      {
        "status": "affected",
        "version": "1022-1014-1016-1002-FFFF"
      },
      {
        "status": "affected",
        "version": "1022Y-1014Y-1016Y-1002Y-FFFF"
      },
      {
        "status": "affected",
        "version": "1023-1013-1011-1009"
      },
      {
        "status": "affected",
        "version": "1023-1014-1017-1002-FFFF"
      },
      {
        "status": "affected",
        "version": "1025-1014-1013-1009"
      },
      {
        "status": "affected",
        "version": "1026-1014-1014-1009"
      },
      {
        "status": "affected",
        "version": "1027-1014-1015-1009"
      },
      {
        "status": "affected",
        "version": "S968-S968-S968-S968"
      },
      {
        "status": "affected",
        "version": "V171P-V171P-V171P-V171P"
      },
      {
        "status": "affected",
        "version": "V189-V189-V189-V189"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
actionquery paramcgi-bin/nobody/Search.cgiSSRF via unauthenticated access to /cgi-bin/nobody/Search.cgi?action=cgi_query allowing attacker to induce the DVR to perform HTTP requests to internal/external targets using provided parameters.CWE-918, CWE-200
ipquery paramcgi-bin/nobody/Search.cgiSSRF via unauthenticated access to /cgi-bin/nobody/Search.cgi?action=cgi_query allowing attacker to induce the DVR to perform HTTP requests to internal/external targets using provided parameters.CWE-918, CWE-200
portquery paramcgi-bin/nobody/Search.cgiSSRF via unauthenticated access to /cgi-bin/nobody/Search.cgi?action=cgi_query allowing attacker to induce the DVR to perform HTTP requests to internal/external targets using provided parameters.CWE-918, CWE-200
queryb64strquery paramcgi-bin/nobody/Search.cgiSSRF via unauthenticated access to /cgi-bin/nobody/Search.cgi?action=cgi_query allowing attacker to induce the DVR to perform HTTP requests to internal/external targets using provided parameters.CWE-918, CWE-200

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 09:13Current
6.8Medium risk
Vulners AI Score6.8
CVSS 46.9
EPSS0.0051
SSVC
CWE-918CWE-200
avtech dvr vulnerabilityserver-side request forgeryunauthorized accesssensitive data exposure
31