CVE-2013-4982

CVE-2013-4982 affects AVTECH AVN801 DVRs; authentication bypass is possible by using the login=quick parameter to bypass the login verification code, potentially granting unauthorized access to feeds or device settings. The issue stems from bypassing the admin login captcha, enabling access witho...

CVE-2013-4980

The CVE-2013-4980 family affects AVTECH AVN801 DVR devices (firmware 1017-1003-1009-1003 and possibly older). A buffer overflow in the RTSP packet handler (CVE-2013-4980) can be triggered remotely via a long URI in an RTSP SETUP request, potentially causing a device crash or remote code execution...

CVE-2013-4981

CVE-2013-4981 is a buffer overflow in AVTECH AVN801 DVR’s CGI interface: cgi-bin/user/Config.cgi is exploitable via HTTP POST, via the Network.SMTP.Receivers field, enabling remote code execution and device crash. Affected firmware: AVN801 DVR 1017-1003-1009-1003 and potentially older revisions. ...