Vivotek

Ib8367a Firmware

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-7443

  • EPSS 0.42%
  • Published 03.08.2024 19:15:42
  • Last modified 06.08.2024 17:47:12

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Vivotek IB8367A VVTK-0100b. Affected is the function getenv of the file upload_file.cgi. The manipulation of the argument QUERY_STRING leads to command injection...

6.5

CVE-2020-11949

  • EPSS 0.33%
  • Published 28.05.2020 13:15:11
  • Last modified 21.11.2024 04:58:57

testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388...

9

CVE-2020-11950

  • EPSS 1.47%
  • Published 28.05.2020 13:15:11
  • Last modified 21.11.2024 04:58:58

VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution of OS commands). For example, this affects IT9388-HT devices.