ByteOS Network

CVE Vulnerability Details :

CVE-2025-34053

PUBLISHED

More Info Official Page

Assigner-VulnCheck

Assigner Org ID-83251b91-4cc7-4094-a5c7-464a1b83ea10

Published At-01 Jul, 2025 | 14:45

Updated At-01 Jul, 2025 | 18:46

▼CVE Numbering Authority (CNA)

AVTECH IP camera, DVR, and NVR Devices Authentication Bypass via .cab Path Manipulation

An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function is used to identify ".cab" requests, allowing any URL containing ".cab" to bypass authentication and access protected endpoints.

Affected Products

Vendor

Avtec (Motorola Solutions)

Product

IP camera, DVR, and NVR devices

Modules

streamd web server
request URL parameter

Default Status

unaffected

Versions

Affected

1000-1000-1000-1000
1000C-1000C-1000C-1000C
1001-1000-1000-1000
1001-1001-1000-1000
1002-1000-1000-1000
1002-1002-1000-1002
1002D-1000D-1000D-1000D
1003-1000-1000-1001
1003-1001-1001-1000
1003-1002-1001-1000
1004-1000-1000-1000
1004-1001-1001-1001
1004-1003-1001-1002
1004-1003-1002-1001
1004A-1001A-1002A-1000A
1005-1002-1001-1002
1005-1003-1001-1002
1005-1004-1002-1001
1005A-1001A-1002A-1001A
1005D-1001D-1002D-1001D
1006-1002-1001-1002
1006-1004-1003-1001
1007-1001-1003-1001
1007-1001-1004-1003
1007-1002-1001-1003
1007-1002-1003-1002
1007-1004-1003-1001
1008-1001-1003-1002
1008-1004-1004-1001
1008D-1003D-1004D-1002D
1008J-1004J-1004J-1001J
1009-1001-1004-1001
1009-1002-1005-1003
1009-1003-1005-1002
1010-1001-1004-1001
1010-1001-1004-1002
1010-1003-1005-1002
1010-1003-1006-1003
1010-1003-1006-1004
1010-1004-1007-1001
1010J-1001J-1004J-1001J
1010N-1003N-1005N-1002N
1011-1001-1002A-1002
1011-1001-1002D-1002
1011-1001-1003-1002
1011-1001-1004-1002
1011-1001-1005-1002
1011-1004-1005-1002
1012-1001-1005-1002
1012-1001-1005-1003
1012-1001-1005PO-1002
1012-1003-1007-1002
1012-1003-1007-1004
1013-1001-1005-1003
1013-1002-1006-1002
1013-1003-1008-1003
1013-1004-1008-1004
1013-1005-1005-1002
1013-1005-1007-1002
1013K-1005K-1007PO-1002K
1014-1002-1006-1002
1014-1002-1006-1003
1014-1003-1008-1003
1014-1005-1008-1002
1014B-1002B-1006B-1002B
1015-1001-1006-1003
1015-1002-1006-1003
1015-1002-1007-1002
1015-1003-1008-1003
1015-1005-1009-1004
1015-1006-1004-1002
1015-1006-1005-1002
1015-1006-1008-1002
1015C-1004C-1003C-1005C
1015K-1006K-1008PO-1002K
1016-1002-1007-1002
1016-1006-1013-1002
1016-1007-1009-1003
1016-1007-1011-1003
1017-1002-1007-1003
1017-1003-1007-1003
1017-1003-1009-1003
1017-1005-1004-1005
1017-1006-1013-1002
1017-1013-1014-1005
1018-1003-1005-1004
1018-1003-1008-1003
1018-1003-1008-1004
1018-1003-1008PO-1003
1018-1004-1005-1005
1018-1007-1009-1003
1018-1012-1011-1010
1019-1004-1006-1005
1019-1007-1009-1003
1020-1003-1008-1003
1020-1003-1008-1004
1020-1004-1007-1006
1020-1007-1008-1003
1020-1007-1009-1003
1021-1003-1008-1003
1021-1003-1008-1004
1021-1005-1006-1005
1021-1005-1008-1006
1021-1006-1015-1002
1021-1007-1010-1003
1022-1005-1007-1005
1022-1005-1009-1007
1022-1006-1015-1002
1022-1013-1014-1010
1022-1014-1016-1002-FFFF
1022Y-1014Y-1016Y-1002Y-FFFF
1023-1005-1008-1006
1023-1007-1016-1003
1024-1019-1019-1007
1025-1006-1010-1007
1025-1017-1017-1011
1027-1007-1019-1003
1027-1021-1021-1008
1028-1021-1022-1008
1031-1007-1022-1003
1032-1022-1024-1008
1033-1018-1021-1012
1035-1005-1005-1004
1035-1005-1005-1005
1035-1005-1005-1005P
1035-1007-1024-1003
1035-1024-1025-1008
1036-1005-1006-1005
1036-1007-1024-1003
1036-1014-1016-1016
1037-1024-1027-1008
1037-1025-1027-1008
1038-1021-1024-1012
1038-1021-1024-1012-A5
1038-1025-1028-1008
1039-1005-1008-1004
1039-1005-1008-1005
1039-1014-1017-1016
1039D-1014D-1017D-1016D
1040-1026-1029-1008
1041-1005-1009-1005
1042-1026-1030-1008
1044-1026-1030-1008
1044-1026-1031-1008
1045-1015-1020-1018
1046-1027-1032-1008
1047-1027-1031-1008
1049-1027-1033-1008
1050-1027-1034-1008
1050-1027-1036-1008
1051-1027-1035-1008
1051CZ-1028-1037-1008
1052-1027-1034-1008
1052-1028-1038-1008
1052A-1028-1038A-1008
1054-1027-1036-1008
1054-1028-1036-1008
1055-1028-1036-1008
1056-1028-1037-1008
1058-1028-1039-1008
1062-1028-1041-1008
1065-1029-1043-1008
1068-1029-1043-1008
1069-1029-1043-1008
1071-1029-1044-1008
1077-1017-1035-1007
1077-1017-1035-1007-A6
1077-1017-1035-1007-D4
1077-1017-1035-1007-D705FF
1078-1017-1036-1007
1078-1017-1036-1007-A6
1078-1017-1036-1007-D707FF
1079-1017-1037-1007
1079-1017-1037-1007-D4
1W77-1W17-1W35-1W07-A6
A077-1017-A035-1007
A077-1017-A035-1007-A6
A1035-1024-A1025-1008
A1038-1025-A1028-1008-D4
S681-S681-S681-S681
S749-S749-S749-S749
S818-S818-S818-S818
S820-S820-S820-S820
S823-S823-S823-S823
S914V-S914V-S914V-S914V
S984-S984-S984-S984

Problem Types

Type	CWE ID	Description
CWE	CWE-290	CWE-290 Authentication Bypass by Spoofing

Type: CWE

CWE ID: CWE-290

Description: CWE-290 Authentication Bypass by Spoofing

Metrics

Version	Base score	Base severity	Vector
4.0	6.9	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Version: 4.0

Base score: 6.9

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Impacts

CAPEC ID	Description
CAPEC-115	CAPEC-115 Authentication Bypass
CAPEC-137	CAPEC-137 Parameter Injection

CAPEC ID: CAPEC-115

Description: CAPEC-115 Authentication Bypass

CAPEC ID: CAPEC-137

Description: CAPEC-137 Parameter Injection

Credits

finder

Gergely Eberhardt (SEARCH-LAB.hu)

References

Hyperlink	Resource
https://www.exploit-db.com/exploits/40500	exploit
https://avtech.com/	product
https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities	third-party-advisory technical-description
https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH	exploit
https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns	third-party-advisory

Hyperlink: https://www.exploit-db.com/exploits/40500

Resource:

exploit

Hyperlink: https://avtech.com/

Resource:

product

Hyperlink: https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities

Resource:

third-party-advisory

technical-description

Hyperlink: https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH

Resource:

exploit

Hyperlink: https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns

Resource:

third-party-advisory

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References