Avtech manufactures a narrow line of network video recorders and digital video management appliances, including products such as the DGM1104 and AVN801 DVR, which serve as entry points into surveillance infrastructure. Vulnerabilities affecting the vendor skew toward serious outcomes and frequently acquire public exploit code, concentrating in firmware-level implementations of these devices through recurring weakness classes including command injection, memory-safety violations, improper authentication, and certificate-validation gaps that are endemic to embedded network appliances. Defenders should inventory these devices for management-interface exposure and treat firmware updates as a priority; live severity and exploitation figures are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Avtech over time
Signals from CVEs in this vendor scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-7029CRITICAL Commands can be injected over the network and executed without authentication. | Aug 2, 2024 | 9.8 | 66 | NO | YES |
CVE-2013-4982CRITICAL AVTECH AVN801 DVR has a security bypass via the administration login captcha | Dec 27, 2019 | 9.8 | 49 | NO | YES |
CVE-2025-57201HIGH AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function. This vulnerab | Dec 3, 2025 | 8.8 | 40 | NO | NO |
CVE-2013-4981HIGH Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial | Mar 3, 2014 | 9.0 | 35 | NO | YES |
CVE-2013-4980HIGH Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial | Mar 3, 2014 | 9.0 | 35 | NO | YES |
CVE-2025-57199HIGH AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary. This vulner | Dec 3, 2025 | 8.8 | 33 | NO | NO |
CVE-2025-57198HIGH AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnera | Dec 3, 2025 | 8.8 | 33 | NO | NO |
CVE-2025-46408CRITICAL An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The met | Sep 15, 2025 | 9.8 | 29 | NO | NO |
CVE-2019-13379HIGH On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by perform | Jul 7, 2019 | 8.8 | 29 | NO | NO |
CVE-2025-50944HIGH An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0. The custom X509TrustManager used in checkServerTruste | Sep 15, 2025 | 8.8 | 27 | NO | NO |
Signals from CVEs in this vendor scope (13 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Avtech.
Media articles that mention a CVE ID that affects a product developed by Avtech — matched by CVE ID, not by vendor name.