CVE-2025-34052: AVTECH IP camera, DVR, and NVR Devices Unauthenticated Information Disclosure
Rejected reason: An unauthenticated endpoint that exposes firmware version, MAC address, and supported codecs is not indicative of a security boundary being crossed, as this metadata is not inherently sensitive and commonly used for legitimate fingerprinting and discovery.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34052?
CVE-2025-34052 is classified as a high severity vulnerability due to the risk of unauthorized access to sensitive device information.
How do I fix CVE-2025-34052?
To mitigate CVE-2025-34052, ensure proper authentication mechanisms are implemented and upgrade to the latest firmware version provided by AVTECH.
What devices are affected by CVE-2025-34052?
CVE-2025-34052 affects AVTECH IP cameras, DVRs, and NVRs.
What kind of information can be disclosed by exploiting CVE-2025-34052?
Exploiting CVE-2025-34052 can disclose sensitive internal device information such as firmware version, MAC address, and codec support.
Is CVE-2025-34052 exploitable remotely?
Yes, CVE-2025-34052 is exploitable remotely, allowing unauthenticated users to access sensitive information from the affected devices.