Vulnerabilities > CVE-2018-18004 - Missing Authorization vulnerability in Vivotek Camera

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
vivotek
CWE-862

Summary

Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable arbitrary system services via a URL parameter.

Vulnerable Configurations

Part Description Count
Hardware
Vivotek
1

Common Weakness Enumeration (CWE)