VULNERABILITY INTELLIGENCE
CVE-2025-34065
EPSS probability0.62%
CISA KEVNot currently listed
Published2025-07-01
Last modified2026-06-17
Description
An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls.
Weakness classification
- disclosure@vulncheck.com: CWE-290