What is the CVSS score of CVE-2025-34050?

CVE-2025-34050 has a CVSS 4.0 base score of 5.1 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. EPSS exploitation probability: 0.0%.

Is there a public PoC exploit available for CVE-2025-34050?

Yes, a public proof-of-concept exploit is available for CVE-2025-34050. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2025-34050?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Verify anti-CSRF tokens are enforced.

CVE-2025-34050

EUVD-2025-19647 MEDIUM

Cross-Site Request Forgery (CSRF) (CWE-352)

2025-07-01 disclosure@vulncheck.com

CSRF

5.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.1 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 01:42 euvd

EUVD-2025-19647

Analysis Generated

Mar 16, 2026 - 01:42 vuln.today

PoC Detected

Jul 03, 2025 - 15:14 vuln.today

Public exploit code

CVE Published

Jul 01, 2025 - 15:15 nvd

MEDIUM 5.1

DescriptionCVE.org

A cross-site request forgery (CSRF) vulnerability exists in the web interface of AVTECH IP camera, DVR, and NVR devices. An attacker can craft malicious requests that, when executed in the context of an authenticated user’s browser session, allow unauthorized changes to the device configuration without user interaction.

Analysis

Technical ContextAI

Cross-Site Request Forgery forces authenticated users to perform unintended actions by tricking their browser into sending forged requests. This vulnerability is classified as Cross-Site Request Forgery (CSRF) (CWE-352).

RemediationAI

Implement anti-CSRF tokens for all state-changing operations. Use SameSite cookie attribute. Verify the Origin/Referer header on the server side.

CVE-2025-34050 vulnerability details – vuln.today

Back