CVE-2016-15047 AVTECH CloudSetup.cgi Authenticated Command Injection

🗓️ 09 Oct 2025 21:10:42Reported by VulnCheckType

Authenticated OS command injection in AVTECH CloudSetup.cgi via exefile, enabling root commands and full device control.

Reporter	Title	Published	Views	Family All 9
CNNVD	AVTECH IP camera 安全漏洞	9 Oct 202500:00	–	cnnvd
CVE	CVE-2016-15047	9 Oct 202521:10	–	cve
EUVD	EUVD-2016-10792	9 Oct 202521:31	–	euvd
NVD	CVE-2016-15047	9 Oct 202521:15	–	nvd
OpenVAS	AVTECH Devices Multiple Vulnerabilities	18 Oct 201600:00	–	openvas
Positive Technologies	PT-2025-41460	11 Oct 201600:00	–	ptsecurity
RedhatCVE	CVE-2016-15047	10 Oct 202521:27	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2016-15047	10 Mar 201700:00	–	vulncheck_kev
Vulnrichment	CVE-2016-15047 AVTECH CloudSetup.cgi Authenticated Command Injection	9 Oct 202521:10	–	vulnrichment

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "CloudSetup.cgi"
    ],
    "product": "IP Camera, NVR, and DVR Devices",
    "vendor": "AVTECH SECURITY Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ]
  }
]

Source	Link
web	www.web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities
sonicwall	www.sonicwall.com/blog/attackers-actively-targeting-vulnerable-avtech-devices
exploit-db	www.exploit-db.com/exploits/40500
web	www.web.archive.org/web/20170420145806/http://www.search-lab.hu/media/vulnerability_matrix.txt
trendmicro	www.trendmicro.com/en_us/research/17/c/new-linux-malware-exploits-cgi-vulnerability.html
vulncheck	www.vulncheck.com/advisories/avtech-cloudsetup-cgi-auth-command-injection

07 Apr 2026 14:03Current

CVSS 48.7

EPSS0.00367

CWE-78