CVE-2025-57199

The CVE-2025-57199 entry concerns AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003, where an authenticated command injection vulnerability exists in the NetFailDetectD binary. The Red Hat and NVD records describe an authenticated command injection that lets an attacker execute arbi...

CVE-2025-57198

Summary: CVE-2025-57198 affects AVTECH SECURITY Corporation DGM1104 devices (FullImg-1015-1004-1006-1003). A vulnerability in the Machine.cgi endpoint allows authenticated attackers to inject commands and execute arbitrary code. The exploited input is crafted to trigger the command injection. The...

CVE-2025-57202

CVE-2025-57202 describes a stored XSS in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003. The vulnerability allows an attacker to inject arbitrary web scripts/HTML via a crafted payload in the username field. According to the provided metrics, the CVSS v...

CVE-2025-57200

The CVE-2025-57200 issue concerns AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003. Affected component: test_mail function, where an authenticated command injection flaw exists. Under the documented vector, an attacker with authenticated access can craft input to execute arbitrary ...

CVE-2025-57201

CVE-2025-57201 affects AVTECH SECURITY DGM1104 FullImg-1015-1004-1006-1003. The issue is an authenticated command-injection vulnerability in the SMB server function that allows an attacker to execute arbitrary commands via a crafted input. CVSSv3.1 vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with...