# CVE-2025-57199: AVTECH IP Cameras authenticated command injection in NetFailDetectD

Source: https://junglewise.ai/threats/cve-2025-57199-avtech-ip-cameras-authenticated-command-injection-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-03. Updated: 2026-07-05  
License: CC BY 4.0 with a link back

CVE-2025-57199 · Severity: high · CVSS 8.8 · Published 2025-12-03

AVTECH IP cameras contain a security flaw in their network connectivity testing feature. An authenticated user can provide specially crafted input that allows them to take full control of the camera as a root user. This could lead to unauthorized surveillance, data theft, or the device being used as a foothold to attack other parts of the corporate network.

Technologies: [Avtech Dgm1104](https://junglewise.ai/threats/technologies/dgm1104), [Avtech Dgm1104 Firmware](https://junglewise.ai/threats/technologies/dgm1104-firmware), [AVTECH SECURITY Corporation AVM1203](https://junglewise.ai/threats/technologies/avm1203), [AVTECH SECURITY Corporation AVM2200](https://junglewise.ai/threats/technologies/avm2200), [AVTECH SECURITY Corporation AVM301](https://junglewise.ai/threats/technologies/avm301). Vendors: [Avtech](https://junglewise.ai/threats/vendors/avtech), [AVTECH SECURITY Corporation](https://junglewise.ai/threats/vendors/avtech-security-corporation).

## Quick answers

**Is CVE-2025-57199 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-57199 being exploited in the wild.

**How severe is CVE-2025-57199?** High severity, with a CVSS score of 8.8, published 3 December 2025.

**Which products and versions are affected?** AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003; AVTECH SECURITY Corporation AVM1203; AVTECH SECURITY Corporation AVM2200; AVTECH SECURITY Corporation AVM301; and 2 more.

**Is there a fix for CVE-2025-57199?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-57199 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2025-57199?** Check whether you run Avtech Dgm1104, Avtech Dgm1104 Firmware, AVTECH SECURITY Corporation AVM1203 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A command injection vulnerability exists in the NetFailDetectD binary of various AVTECH IP cameras. The vulnerability is rooted in the improper neutralization of special elements (CWE-77) within the network failure detection functionality. The binary reads the hostname configuration directly from stored settings and passes it to the popen function without sanitization to perform connectivity pings. An authenticated attacker with access to the web management interface can supply a malicious hostname containing shell metacharacters to achieve arbitrary code execution as the root user. While the advisory specifically highlights DGM1104 firmware FullImg-1015-1004-1006-1003, analysis indicates dozens of other AVM, AVN, and DGM series models are likely affected.

## Affected products

- AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003
- AVTECH SECURITY Corporation AVM1203
- AVTECH SECURITY Corporation AVM2200
- AVTECH SECURITY Corporation AVM301
- AVTECH SECURITY Corporation AVN2503
- AVTECH SECURITY Corporation AVX931A

## Timeline

- 2025-05: disclosed: Vulnerability discovered by Lewis Patten
- 2025-12-03: advisory: CVE published by NVD/MITRE

## References

- [http://dgm1104.com/](http://dgm1104.com/)
- [https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57199](https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57199)

## Related threats

- [AVTECH DGM1104 Stored XSS in PwdGrp.cgi username field](https://junglewise.ai/threats/cve-2025-57202-avtech-dgm1104-stored-xss-in-pwdgrp-cgi-username-field)
- [AVTECH IP Cameras authenticated command injection in SMB function](https://junglewise.ai/threats/cve-2025-57201-avtech-ip-cameras-authenticated-command-injection-in-smb-function)
- [AVTECH IP Cameras authenticated command injection in Machine.cgi](https://junglewise.ai/threats/cve-2025-57198-avtech-ip-cameras-authenticated-command-injection-in-machine-cgi)
- [AVTECH IP Cameras command injection in test_mail function](https://junglewise.ai/threats/cve-2025-57200-avtech-ip-cameras-command-injection-in-test-mail-function)