Beveiligingsadvies

CVE-2025-34065

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-01 14:47:23
Laatst bijgewerkt 2026-04-07 14:09:18
Toegewezen door VulnCheck
CVSS-score 6.9
Status PUBLISHED

Beschrijving

An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls.