Description (CNA)
An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgi_query. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing commands as root. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-04 UTC.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AVTECH / IP camera, DVR, and NVR Devices | affected 1008-1002-1005-1000; affected 1009-1003-1006-1001; affected 1009Y-1003Y-1006Y-1001Y; affected 1010-1004-1007-1001; affected 1011-1005-1008-1002; affected 1014-1005-1009-1002; affected 1015-1006-1010-1003; affected 1016-1007-1011-1003; affected 1017-1008-1012-1002; affected 1017Y-1008Y-1012Y-1002Y; affected 1018-1008-1012-1004; affected 1019-1009-1013-1003; affected 1019c-1012c-1014c-1001c-FFFF; affected 1022-1014-1016-1002-FFFF; affected 1022Y-1014Y-1016Y-1002Y-FFFF; affected 1023-1014-1017-1002-FFFF |
CWE
CWE-78
References
- https://www.exploit-db.com/exploits/40500
- https://avtech.com/
- https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities
- https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH
- https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns
ADP enrichment
No English description supplied.
No references supplied.