Vivotek

Records44All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

Vivotek records in CISA KEV

No Vivotek vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Camera 10 records MEDIUM Fd8136 Firmware 9 records MEDIUM Pt7135 Firmware 5 records HIGH Cc8160 Firmware 4 records MEDIUM Ip7137 Firmware 4 records MEDIUM Ib8367a Firmware 3 records MEDIUM Cc8160(hs) Firmware 2 records MEDIUM Cc8370-hv Firmware 2 records MEDIUM

Records

10 records in Camera · all components

TI-2019-10778 CVE-2019-14457 · GHSA-f88p-2394-7555

VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header.

MEDIUM 47

VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02649 Published 2019-09-10 No fix listed CWE-787

TI-2019-07570 CVE-2019-10256 · GHSA-pjm6-63g2-vp94

An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found.

MEDIUM 45

An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01263 Published 2019-09-10 No fix listed

TI-2018-10602 CVE-2018-14771 · GHSA-7wj7-j6mr-jjjw

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute…

MEDIUM 43

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02982 Published 2018-09-05 No fix listed

TI-2018-10601 CVE-2018-14770 · GHSA-rmp2-65m7-997j

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute…

MEDIUM 43

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service).

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02982 Published 2018-09-05 No fix listed

TI-2018-10599 CVE-2018-14768 · GHSA-m4hj-8g93-8hh4

Various VIVOTEK FD8, FD9, FE9, IB8, IB9, IP9, IZ9, MS9, SD9*, and other devices…

MEDIUM 43

Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02948 Published 2018-08-29 No fix listed

TI-2018-10600 CVE-2018-14769 · GHSA-mmvx-7m2g-g7p9

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF.

LOW 38

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00468 Published 2018-09-05 No fix listed CWE-352

TI-2019-10779 CVE-2019-14458 · GHSA-v3c2-jh3p-w5jg

VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header.

LOW 37

VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01919 Published 2019-09-18 No fix listed

TI-2018-12892 CVE-2018-18244 · GHSA-fjx6-g4j8-pp8r

Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with…

LOW 29

Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00803 Published 2019-01-03 No fix listed CWE-79

TI-2018-12813 CVE-2018-18005 · GHSA-jq3w-x8jr-gmm3

Cross-site scripting in event_script.js in VIVOTEK Network Camera Series products with…

LOW 29

Cross-site scripting in event_script.js in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript via a URL query string parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00803 Published 2019-01-03 No fix listed CWE-79

TI-2018-12812 CVE-2018-18004 · GHSA-j848-g53r-g2rf

Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with…

LOW 26

Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable arbitrary system services via a URL parameter.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.0093 Published 2019-01-03 No fix listed CWE-862

Open these records in search →