CVE-2025-34066: Avtech Dvr Devices

High severity, CVSS 8.3. EPSS: 0.3% chance of exploitation in the next 30 days.

An improper certificate validation vulnerability exists in AVTECH IP cameras, DVRs, and NVRs due to the use of wget with --no-check-certificate in scripts like SyncCloudAccount.sh and SyncPermit.sh. This exposes HTTPS communications to man-in-the-middle (MITM) attacks.

Affected products

• Avtech Dvr Devices: version 0 only
• Avtech IP Cameras: version 0 only
• Avtech NVR Devices: version 0 only

Published 2025-07-01. Last modified 2026-06-17.