Read the docs
TI-2025-11546 Aliases CVE-2025-12592GHSA-3c2h-8xmc-2258

Use of default login credentials in Legacy Vivotek Devices

Priority MEDIUM 48CWE-1392Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00361 30th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
VivotekAffected device model numbers are FD7131-VVTK,FD7131-VVTK,FD7131-VVTK,FD7141-VVTK,IP7131-VVTK,IP7133-VVTK,IP7133-VVTK,IP7133-VVTK,IP7134-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7138-VVTK,IP7142-VVTK,IP7142-VVTK,IP7151-VVTK,IP7152-VVTK,IP7153-VVTK,IP7153-VVTK,IP7154-VVTK,IP7330-VVTK,IP7330-VVTK,IP7330-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131W-VVTK,PT7135-VVTK,PT7137-TCON,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PZ7131-VVTK,PZ7131-VVTK,PZ71X1-VVTK,PZ71X1-VVTK,PZ71X2-VVTK,SD73X3-VVTK,SD73X3-VVTK,SD73X3-VVTK,TC5330-VVTK,TC5332-TCVV,TC5333-TCVV,TC5633-TCVV,TC5633-VVTK,VS7100-VVTK,VS7100-VVTK,VS7100-VVTK0100b; 0100e; 0100e1; 0100e2; 0100f; 0100g; 0100i; 0101c; 0103c; 0199z; 0200a; 0200b; 0200c; 0200g; 0201a; 0201a1; 0201c; 0201k; 0202a; 0202b; 0203a; 0300a; 0300b; 0301b3; 0302a; 0302c; 0400a; 0400b; 0401a; 0500a; 0500b—No fix listedCNA
  • Affected device model numbers are FD7131-VVTK,FD7131-VVTK,FD7131-VVTK,FD7141-VVTK,IP7131-VVTK,IP7133-VVTK,IP7133-VVTK,IP7133-VVTK,IP7134-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7138-VVTK,IP7142-VVTK,IP7142-VVTK,IP7151-VVTK,IP7152-VVTK,IP7153-VVTK,IP7153-VVTK,IP7154-VVTK,IP7330-VVTK,IP7330-VVTK,IP7330-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131W-VVTK,PT7135-VVTK,PT7137-TCON,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PZ7131-VVTK,PZ7131-VVTK,PZ71X1-VVTK,PZ71X1-VVTK,PZ71X2-VVTK,SD73X3-VVTK,SD73X3-VVTK,SD73X3-VVTK,TC5330-VVTK,TC5332-TCVV,TC5333-TCVV,TC5633-TCVV,TC5633-VVTK,VS7100-VVTK,VS7100-VVTK,VS7100-VVTK VendorVivotek Affected 0100b; 0100e; 0100e1; 0100e2; 0100f; 0100g; 0100i; 0101c; 0103c; 0199z; 0200a; 0200b; 0200c; 0200g; 0201a; 0201a1; 0201c; 0201k; 0202a; 0202b; 0203a; 0300a; 0300b; 0301b3; 0302a; 0302c; 0400a; 0400b; 0401a; 0500a; 0500b Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-12592
  2. 2026-10-03 Alias added: GHSA-3c2h-8xmc-2258

References

Other 2

  • TI-2017-07202 '/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras… CVSS 3.0CRITICAL 9.8
  • TI-2026-18278 Legacy Vivotek Camera Firmware Command Injection in upload_map.cgi CVSS 4.0CRITICAL 9.3
  • TI-2017-07203 '/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network… CVSS 3.0HIGH 7.5
  • TI-2013-01402 A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a… CVSS 3.1CRITICAL 9.8
  • TI-2013-01405 A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via… CVSS 3.1HIGH 8.8
  • TI-2025-02987 Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source CVSS 4.0MEDIUM 5.1
See all 43 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences