CVE-2025-34065 — AVTECH IP camera, DVR, and NVR Devices Authentication Bypass via /nobody URL Path
An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function allows unauthenticated access to any request c…
Published: 2025-07-01 · CVSS: 6.9 · CVSS 4.0
An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7