CVE-2025-34055

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Jul 1, 2025
Source updated: Apr 7, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

AVTECH IP camera, DVR, and NVR Devices Authenticated Root Command Execution

An OS command injection vulnerability exists in AVTECH DVR, NVR, and IP camera devices within the adcommand.cgi endpoint, which interfaces with the ActionD daemon. Authenticated users can invoke the DoShellCmd operation, passing arbitrary input via the strCmd parameter. This input is executed directly by the system shell without sanitation allowing attackers to execute commands as the root user.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

IP camera, DVR, and NVR Devices

Vendor: AVTECH
Product: IP camera, DVR, and NVR Devices
Platforms: Unknown
Default status: unaffected

IP camera, DVR, and NVR Devices · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1001-1000-1000-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1002-1000-1000-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1002-1001-1001-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1003-1000-1001-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1003-1001-1001-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1003-1001-1001-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1004-1000-1000-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1004-1001-1001-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1004-1001-1002-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1004-1002-1001-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1004V-1002V-1003V-1001V	`affected`	Unavailable	Unavailable	Unavailable	None listed
1004Y-1002Y-1001EJ-1000Y	`affected`	Unavailable	Unavailable	Unavailable	None listed
1005-1001-1002-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1005-1002-1001-1002	`affected`	Unavailable	Unavailable	Unavailable	None listed
1005-1002-1002-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1005-1002-1004-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1006-1001-1003-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1006-1001-1003-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1006-1002-1001-1002	`affected`	Unavailable	Unavailable	Unavailable	None listed
1006-1002-1003-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1006R-1002R-1001R-1002R	`affected`	Unavailable	Unavailable	Unavailable	None listed
1007-1001-1003-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1007-1001-1003-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1007-1002-1004-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1007-1003-1005-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1007E-1003E-1005EJ-1001E	`affected`	Unavailable	Unavailable	Unavailable	None listed
1007V-1003V-1005V-1001V	`affected`	Unavailable	Unavailable	Unavailable	None listed
1008-1001-1001-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1008-1002-1002-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1008-1002-1005-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1008-1003-1005-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1008-1004-1003-1002	`affected`	Unavailable	Unavailable	Unavailable	None listed
1009-1001-1002-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1009-1001-1004-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1009-1003-1006-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1009-1004-1005-1006	`affected`	Unavailable	Unavailable	Unavailable	None listed
1009-1004-1006-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1009Y-1003Y-1006Y-1001Y	`affected`	Unavailable	Unavailable	Unavailable	None listed
1010-1001-1003-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1010-1001-1004-1005	`affected`	Unavailable	Unavailable	Unavailable	None listed
1010-1002-1005-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1010-1004-1007-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1010-1005-1005-1002	`affected`	Unavailable	Unavailable	Unavailable	None listed
1011-1002-1004-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1011-1002-1006-1000	`affected`	Unavailable	Unavailable	Unavailable	None listed
1011-1005-1007EJ-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1011-1005-1008-1002	`affected`	Unavailable	Unavailable	Unavailable	None listed
1012-1002-1004-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1012-1002-1006-1005	`affected`	Unavailable	Unavailable	Unavailable	None listed
1012-1002-1007-1004	`affected`	Unavailable	Unavailable	Unavailable	None listed
1012-1003-1001-1005	`affected`	Unavailable	Unavailable	Unavailable	None listed
1012-1003-1005-1005	`affected`	Unavailable	Unavailable	Unavailable	None listed
1012-1004-1008-1008	`affected`	Unavailable	Unavailable	Unavailable	None listed
1012-1008-1009-1000-FFFF	`affected`	Unavailable	Unavailable	Unavailable	None listed
1013-1002-1006-1005	`affected`	Unavailable	Unavailable	Unavailable	None listed
1013-1003-1005-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1013-1004-1008-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1013-1004-1008-1008	`affected`	Unavailable	Unavailable	Unavailable	None listed
1014-1002-1007-1004	`affected`	Unavailable	Unavailable	Unavailable	None listed
1014-1003-1006-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1014-1003-1006PL-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1014-1003-1007-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1014-1004-1008-1008	`affected`	Unavailable	Unavailable	Unavailable	None listed
1014-1005-1009-1002	`affected`	Unavailable	Unavailable	Unavailable	None listed
1014-1007-1009-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1014L-1002L-1006L-1005L	`affected`	Unavailable	Unavailable	Unavailable	None listed
1015-1006-1004-1002	`affected`	Unavailable	Unavailable	Unavailable	None listed
1015-1006-1005-1002	`affected`	Unavailable	Unavailable	Unavailable	None listed
1015-1006-1008-1002	`affected`	Unavailable	Unavailable	Unavailable	None listed
1015-1006-1008-1007	`affected`	Unavailable	Unavailable	Unavailable	None listed
1015-1006-1010-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1015-1007-1007-1007	`affected`	Unavailable	Unavailable	Unavailable	None listed
1015K-1006K-1008PO-1002K	`affected`	Unavailable	Unavailable	Unavailable	None listed
1015Y-1007Y-1010Y-1001Y	`affected`	Unavailable	Unavailable	Unavailable	None listed
1016-1003-1007-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1016-1004-1009-1009	`affected`	Unavailable	Unavailable	Unavailable	None listed
1016-1006-1008-1007	`affected`	Unavailable	Unavailable	Unavailable	None listed
1016-1007-1005-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1016-1007-1009-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1016-1007-1011-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1016-1007-1011-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1016-1008-1007-1007	`affected`	Unavailable	Unavailable	Unavailable	None listed
1016Y-1007Y-1011Y-1001Y	`affected`	Unavailable	Unavailable	Unavailable	None listed
1017-1002-1008-1005	`affected`	Unavailable	Unavailable	Unavailable	None listed
1017-1003-1007-1002	`affected`	Unavailable	Unavailable	Unavailable	None listed
1017-1003-1008-1006	`affected`	Unavailable	Unavailable	Unavailable	None listed
1017-1008-1012-1002	`affected`	Unavailable	Unavailable	Unavailable	None listed
1017-1011-1013-1001-FFFF	`affected`	Unavailable	Unavailable	Unavailable	None listed
1017k-1003k-1008k-1006k	`affected`	Unavailable	Unavailable	Unavailable	None listed
1017Y-1008Y-1012Y-1002Y	`affected`	Unavailable	Unavailable	Unavailable	None listed
1018-1003-1005-1004	`affected`	Unavailable	Unavailable	Unavailable	None listed
1018-1003-1007-1002	`affected`	Unavailable	Unavailable	Unavailable	None listed
1018-1003-1008-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1018-1003-1008-1004	`affected`	Unavailable	Unavailable	Unavailable	None listed
1018-1003-1008PO-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1018-1006-1009-1007	`affected`	Unavailable	Unavailable	Unavailable	None listed
1018-1007-1009-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1018-1008-1012-1004	`affected`	Unavailable	Unavailable	Unavailable	None listed
1019-1003-1007-1002	`affected`	Unavailable	Unavailable	Unavailable	None listed
1019-1003-1008-1001	`affected`	Unavailable	Unavailable	Unavailable	None listed
1019-1004-1009-1007	`affected`	Unavailable	Unavailable	Unavailable	None listed
1019-1007-1009-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1019-1009-1013-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1019-1010-1009-1009	`affected`	Unavailable	Unavailable	Unavailable	None listed
1019c-1012c-1014c-1001c-FFFF	`affected`	Unavailable	Unavailable	Unavailable	None listed
1020-1003-1008-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1020-1003-1008-1004	`affected`	Unavailable	Unavailable	Unavailable	None listed
1020-1003-1010-1006	`affected`	Unavailable	Unavailable	Unavailable	None listed
1020-1004-1009-1007	`affected`	Unavailable	Unavailable	Unavailable	None listed
1020-1005-1011-1010	`affected`	Unavailable	Unavailable	Unavailable	None listed
1020-1005-1012-1007	`affected`	Unavailable	Unavailable	Unavailable	None listed
1020-1007-1008-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1020-1007-1009-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1021-1003-1008-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1021-1003-1008-1004	`affected`	Unavailable	Unavailable	Unavailable	None listed
1021-1005-1011-1010	`affected`	Unavailable	Unavailable	Unavailable	None listed
1021-1007-1010-1003	`affected`	Unavailable	Unavailable	Unavailable	None listed
1021L-1003L-1010L-1006L	`affected`	Unavailable	Unavailable	Unavailable	None listed
1021r-1004r-1009r-1007r	`affected`	Unavailable	Unavailable	Unavailable	None listed
1022-1003-1008-1002	`affected`	Unavailable	Unavailable	Unavailable	None listed
1022-1004-1009-1007	`affected`	Unavailable	Unavailable	Unavailable	None listed
1022-1007-1012-1007	`affected`	Unavailable	Unavailable	Unavailable	None listed
1022-1012-1011-1009	`affected`	Unavailable	Unavailable	Unavailable	None listed
1022-1014-1016-1002-FFFF	`affected`	Unavailable	Unavailable	Unavailable	None listed
1022L-1004L-1011L-1006L	`affected`	Unavailable	Unavailable	Unavailable	None listed
1022L-1005L-1011L-1010L	`affected`	Unavailable	Unavailable	Unavailable	None listed
1022Y-1014Y-1016Y-1002Y-FFFF	`affected`	Unavailable	Unavailable	Unavailable	None listed
1023-1004-1010-1007	`affected`	Unavailable	Unavailable	Unavailable	None listed
1023-1014-1017-1002-FFFF	`affected`	Unavailable	Unavailable	Unavailable	None listed
1025-1006-1013-1011	`affected`	Unavailable	Unavailable	Unavailable	None listed
1025-1008-1013-1008	`affected`	Unavailable	Unavailable	Unavailable	None listed
1025-1014-1013-1009	`affected`	Unavailable	Unavailable	Unavailable	None listed
1027-1008-1012-1008	`affected`	Unavailable	Unavailable	Unavailable	None listed
1027-1008-1013-1008	`affected`	Unavailable	Unavailable	Unavailable	None listed
1027-1014-1015-1009	`affected`	Unavailable	Unavailable	Unavailable	None listed
1027L-1006L-1015L-1009L	`affected`	Unavailable	Unavailable	Unavailable	None listed
1028-1007-1014-1012	`affected`	Unavailable	Unavailable	Unavailable	None listed
1029-1007-1014-1008	`affected`	Unavailable	Unavailable	Unavailable	None listed
1030-1007-1014-1012	`affected`	Unavailable	Unavailable	Unavailable	None listed
1030-1008-1014-1008	`affected`	Unavailable	Unavailable	Unavailable	None listed
1031-1007-1015-1012	`affected`	Unavailable	Unavailable	Unavailable	None listed
1032-1007-1015-1008	`affected`	Unavailable	Unavailable	Unavailable	None listed
1032k-1007k-1015k-1008k	`affected`	Unavailable	Unavailable	Unavailable	None listed
1036r-1008r-1016r-1009r	`affected`	Unavailable	Unavailable	Unavailable	None listed
1037-1008-1017-1009	`affected`	Unavailable	Unavailable	Unavailable	None listed
S749-S749-S749-S749	`affected`	Unavailable	Unavailable	Unavailable	None listed
S820-S820-S820-S820	`affected`	Unavailable	Unavailable	Unavailable	None listed
S823-S823-S823-S823	`affected`	Unavailable	Unavailable	Unavailable	None listed
S855-S855-S855-S855	`affected`	Unavailable	Unavailable	Unavailable	None listed
S914V-S914V-S914V-S914V	`affected`	Unavailable	Unavailable	Unavailable	None listed
S968-S968-S968-S968	`affected`	Unavailable	Unavailable	Unavailable	None listed
S984-S984-S984-S984	`affected`	Unavailable	Unavailable	Unavailable	None listed
T717-T717-T717-T717	`affected`	Unavailable	Unavailable	Unavailable	None listed