CVE-2025-57199

The AVTECH SECURITY Corporation DGM1104 network video recorder (specifically FullImg-1015-1004-1006-1003 ) is vulnerable to an authenticated command injection flaw within the NetFailDetectD binary. An attacker with low-level privileges can provide a crafted input to execute arbitrary commands on ...

CVE-2025-57200

The AVTECH SECURITY Corporation DGM1104 network video recorder (version FullImg-1015-1004-1006-1003 ) is vulnerable to an authenticated command injection flaw within the test_mail function. This vulnerability allows an attacker to execute arbitrary commands by providing specially crafted input, p...

CVE-2025-57198

The AVTECH SECURITY Corporation DGM1104 network video recorder, specifically versions FullImg-1015-1004-1006-1003 , is susceptible to an authenticated command injection vulnerability. The flaw resides in the Machine.cgi endpoint, where a lack of sufficient input validation allows an attacker to e...

CVE-2025-57202

The AVTECH SECURITY Corporation DGM1104 network video recorder (specifically FullImg-1015-1004-1006-1003 ) is vulnerable to a stored cross-site scripting (XSS) vulnerability in the PwdGrp.cgi endpoint. This flaw occurs due to improper neutralization of input, allowing an attacker to execute arbit...

CVE-2025-57201

The AVTECH SECURITY Corporation DGM1104 network video recorder, specifically version FullImg-1015-1004-1006-1003 , is vulnerable to an authenticated command injection flaw in the SMB server function . An attacker with low-level privileges can execute arbitrary commands by providing specially craf...