VULNERABILITY INTELLIGENCE
CVE-2025-34053
EPSS probability0.63%
CISA KEVNot currently listed
Published2025-07-01
Last modified2026-06-17
Description
An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function is used to identify ".cab" requests, allowing any URL containing ".cab" to bypass authentication and access protected endpoints.
Weakness classification
- disclosure@vulncheck.com: CWE-290