CNNVD-202507-046 Information
CNNVD ID
CNNVD-202507-046
Related CVE
- CNNVD Published: 2025-07-01
Description (Chinese)
AVTECH DVR是美国AVTECH公司的一款数位录影主机。 AVTECH DVR存在安全漏洞，该漏洞源于未经验证的/cgi-bin/nobody/Search.cgi端点存在服务端请求伪造，可能导致敏感数据泄露。
Description (English)
AVTECH DVD is a digital video host for AVTECH in the United States. AVTECH DVR has a security loophole, which stems from the unverified existence of service-end/cgi-bin/nobody/Search.cgi requests, which may lead to the disclosure of sensitive data.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
陞泰科技
Published
2025-07-01
Last Modified
2026-02-24
References
https://www.exploit-db.com/exploits/40500 https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns https://avtech.com/ https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities https://web.archive.org/web/20240810225729/ https://github.com/ebux/AVTECH https://web.archive.org/web/20161029201749/ https://access.redhat.com/security/cve/cve-2025-34051