{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2025-34050",
        "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "state": "PUBLISHED",
        "assignerShortName": "VulnCheck",
        "dateReserved": "2025-04-15T19:15:22.548Z",
        "datePublished": "2025-07-01T14:42:57.143Z",
        "dateUpdated": "2026-04-07T14:09:13.996Z"
    },
    "containers": {
        "cna": {
            "affected": [
                {
                    "defaultStatus": "unaffected",
                    "modules": [
                        "Web Management Interface (configuration endpoints)"
                    ],
                    "product": "IP cameras",
                    "vendor": "AVTECH",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0"
                        }
                    ]
                },
                {
                    "defaultStatus": "unaffected",
                    "modules": [
                        "Web Management Interface (configuration endpoints)"
                    ],
                    "product": "DVR devices",
                    "vendor": "AVTECH",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0"
                        }
                    ]
                },
                {
                    "defaultStatus": "unaffected",
                    "modules": [
                        "Web Management Interface (configuration endpoints)"
                    ],
                    "product": "NVR devices",
                    "vendor": "AVTECH",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0"
                        }
                    ]
                }
            ],
            "credits": [
                {
                    "lang": "en",
                    "type": "finder",
                    "value": "Gergely Eberhardt (SEARCH-LAB.hu)"
                }
            ],
            "descriptions": [
                {
                    "lang": "en",
                    "supportingMedia": [
                        {
                            "base64": false,
                            "type": "text/html",
                            "value": "A cross-site request forgery (CSRF) vulnerability exists in the web interface of AVTECH IP camera, DVR, and NVR devices. An attacker can craft malicious requests that, when executed in the context of an authenticated user’s browser session, allow unauthorized changes to the device configuration without user interaction."
                        }
                    ],
                    "value": "A cross-site request forgery (CSRF) vulnerability exists in the web interface of AVTECH IP camera, DVR, and NVR devices. An attacker can craft malicious requests that, when executed in the context of an authenticated user’s browser session, allow unauthorized changes to the device configuration without user interaction."
                }
            ],
            "impacts": [
                {
                    "capecId": "CAPEC-62",
                    "descriptions": [
                        {
                            "lang": "en",
                            "value": "CAPEC-62 Cross Site Request Forgery"
                        }
                    ]
                }
            ],
            "metrics": [
                {
                    "cvssV4_0": {
                        "Automatable": "NOT_DEFINED",
                        "Recovery": "NOT_DEFINED",
                        "Safety": "NOT_DEFINED",
                        "attackComplexity": "LOW",
                        "attackRequirements": "NONE",
                        "attackVector": "NETWORK",
                        "baseScore": 5.1,
                        "baseSeverity": "MEDIUM",
                        "privilegesRequired": "NONE",
                        "providerUrgency": "NOT_DEFINED",
                        "subAvailabilityImpact": "NONE",
                        "subConfidentialityImpact": "NONE",
                        "subIntegrityImpact": "NONE",
                        "userInteraction": "ACTIVE",
                        "valueDensity": "NOT_DEFINED",
                        "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
                        "version": "4.0",
                        "vulnAvailabilityImpact": "NONE",
                        "vulnConfidentialityImpact": "NONE",
                        "vulnIntegrityImpact": "LOW",
                        "vulnerabilityResponseEffort": "NOT_DEFINED"
                    },
                    "format": "CVSS",
                    "scenarios": [
                        {
                            "lang": "en",
                            "value": "GENERAL"
                        }
                    ]
                }
            ],
            "problemTypes": [
                {
                    "descriptions": [
                        {
                            "cweId": "CWE-352",
                            "description": "CWE-352 Cross-Site Request Forgery (CSRF)",
                            "lang": "en",
                            "type": "CWE"
                        }
                    ]
                }
            ],
            "providerMetadata": {
                "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
                "shortName": "VulnCheck",
                "dateUpdated": "2026-04-07T14:09:13.996Z"
            },
            "references": [
                {
                    "tags": [
                        "exploit"
                    ],
                    "url": "https://www.exploit-db.com/exploits/40500"
                },
                {
                    "tags": [
                        "product"
                    ],
                    "url": "https://avtech.com/"
                },
                {
                    "tags": [
                        "third-party-advisory",
                        "technical-description"
                    ],
                    "url": "https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities"
                },
                {
                    "tags": [
                        "exploit"
                    ],
                    "url": "https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH"
                },
                {
                    "tags": [
                        "third-party-advisory"
                    ],
                    "url": "https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns"
                }
            ],
            "source": {
                "discovery": "UNKNOWN"
            },
            "title": "AVTECH IP Camera, DVR, and NVR Devices Cross-Site Request Forgery",
            "x_generator": {
                "engine": "Vulnogram 0.2.0"
            },
            "datePublic": "2016-10-11T00:00:00.000Z"
        },
        "adp": [
            {
                "metrics": [
                    {
                        "other": {
                            "type": "ssvc",
                            "content": {
                                "timestamp": "2025-07-01T18:44:55.395830Z",
                                "id": "CVE-2025-34050",
                                "options": [
                                    {
                                        "Exploitation": "poc"
                                    },
                                    {
                                        "Automatable": "no"
                                    },
                                    {
                                        "Technical Impact": "partial"
                                    }
                                ],
                                "role": "CISA Coordinator",
                                "version": "2.0.3"
                            }
                        }
                    }
                ],
                "title": "CISA ADP Vulnrichment",
                "providerMetadata": {
                    "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
                    "shortName": "CISA-ADP",
                    "dateUpdated": "2025-07-01T18:45:06.703Z"
                }
            }
        ]
    }
}