# CVE-2025-57201: AVTECH IP Cameras authenticated command injection in SMB function

Source: https://junglewise.ai/threats/cve-2025-57201-avtech-ip-cameras-authenticated-command-injection-in-smb-function  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-03. Updated: 2026-06-01  
License: CC BY 4.0 with a link back

CVE-2025-57201 · Severity: high · CVSS 8.8 · Published 2025-12-03

A security vulnerability has been identified in several AVTECH IP cameras, which are used for video surveillance and security monitoring. An attacker with valid login credentials can exploit the camera's file-sharing settings to take complete control of the device. This could allow an unauthorized person to view private video feeds, disable security monitoring, or use the camera as a foothold to attack other parts of the corporate network.

Technologies: [Avtech Dgm1104](https://junglewise.ai/threats/technologies/dgm1104), [Avtech Dgm1104 Firmware](https://junglewise.ai/threats/technologies/dgm1104-firmware), [AVTECH SECURITY Corporation AVM2200](https://junglewise.ai/threats/technologies/avm2200), [AVTECH SECURITY Corporation AVM301](https://junglewise.ai/threats/technologies/avm301). Vendors: [Avtech](https://junglewise.ai/threats/vendors/avtech), [AVTECH SECURITY Corporation](https://junglewise.ai/threats/vendors/avtech-security-corporation).

## Quick answers

**Is CVE-2025-57201 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-57201 being exploited in the wild.

**How severe is CVE-2025-57201?** High severity, with a CVSS score of 8.8, published 3 December 2025.

**Which products and versions are affected?** AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003; AVTECH SECURITY Corporation VM1203; AVTECH SECURITY Corporation AVM2200; AVTECH SECURITY Corporation AVM301; and 2 more.

**Is there a fix for CVE-2025-57201?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-57201 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2025-57201?** Check whether you run Avtech Dgm1104, Avtech Dgm1104 Firmware, AVTECH SECURITY Corporation AVM2200 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A post-authentication command injection vulnerability exists in the SMB share functionality of the admin web interface across multiple AVTECH IP camera models. The flaw resides in the 'cgibox' binary, specifically within the function responsible for mounting remote SMB shares. The device retrieves saved SMB configuration settings from flash memory and passes them to the 'system()' function without proper sanitization. An authenticated attacker can provide maliciously crafted input to the web API to execute arbitrary commands with root privileges. While the advisory highlights the DGM1104 model, firmware analysis suggests dozens of other models (including AVM, AVN, and AVX series) are also affected.

## Affected products

- AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003
- AVTECH SECURITY Corporation VM1203
- AVTECH SECURITY Corporation AVM2200
- AVTECH SECURITY Corporation AVM301
- AVTECH SECURITY Corporation AVN2503
- AVTECH SECURITY Corporation AVX931A

## Timeline

- 2025-05: other: Vulnerability discovered by Lewis Patten
- 2025-12-03: advisory: Initial disclosure and CVE assignment

## References

- [http://avtech.com/](http://avtech.com/)
- [http://dgm1104.com/](http://dgm1104.com/)
- [https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57201](https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57201)

## Related threats

- [AVTECH DGM1104 Stored XSS in PwdGrp.cgi username field](https://junglewise.ai/threats/cve-2025-57202-avtech-dgm1104-stored-xss-in-pwdgrp-cgi-username-field)
- [AVTECH IP Cameras authenticated command injection in NetFailDetectD](https://junglewise.ai/threats/cve-2025-57199-avtech-ip-cameras-authenticated-command-injection-in)
- [AVTECH IP Cameras authenticated command injection in Machine.cgi](https://junglewise.ai/threats/cve-2025-57198-avtech-ip-cameras-authenticated-command-injection-in-machine-cgi)
- [AVTECH IP Cameras command injection in test_mail function](https://junglewise.ai/threats/cve-2025-57200-avtech-ip-cameras-command-injection-in-test-mail-function)