Vulnerabilities > CVE-2018-14496 - Out-of-bounds Write vulnerability in Vivotek Fd8136 Firmware 0301A

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
vivotek
CWE-787
critical
NVD
Published: 2019-07-10
Updated: 2024-11-21

Summary

Vivotek FD8136 devices allow remote memory corruption and remote code execution because of a stack-based buffer overflow, related to sprintf, vlocal_buff_4326, and set_getparam.cgi. NOTE: The vendor has disputed this as a vulnerability and states that the issue does not cause a web server crash or have any other affect on it's performance

Vulnerable Configurations

Part Description Count
OS
Vivotek
1
Hardware
Vivotek
1

Common Weakness Enumeration (CWE)

References