← Database

CVE-2025-34065

N/A CVSS: N/A Published: 2025-07-01 Modified: 2026-06-17

Description

An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls.

Affected Platforms

Unknown

Weakness Type

CWE-290

References