Vulnerabilities > Vivotek
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-08-03 | CVE-2024-7443 | Command Injection vulnerability in Vivotek Ib8367A Firmware ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Vivotek IB8367A VVTK-0100b. | 9.8 |
| 2024-08-03 | CVE-2024-7441 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Vivotek Sd9364 Firmware ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. | 9.8 |
| 2024-08-03 | CVE-2024-7442 | Command Injection vulnerability in Vivotek Sd9364 Firmware ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. | 9.8 |
| 2024-08-03 | CVE-2024-7440 | Command Injection vulnerability in Vivotek Cc8160 Firmware ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d. | 9.8 |
| 2024-08-03 | CVE-2024-7439 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Vivotek Cc8160 Firmware ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical. | 9.8 |
| 2020-05-28 | CVE-2020-11950 | OS Command Injection vulnerability in Vivotek products VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution of OS commands). | 8.8 |
| 2020-05-28 | CVE-2020-11949 | Unspecified vulnerability in Vivotek products testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary files from a camera's local filesystem. | 6.5 |
| 2020-01-24 | CVE-2013-1598 | OS Command Injection vulnerability in Vivotek Pt7135 Firmware 0300A/0400A A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, which cold let a malicious user execute arbitrary code. | 8.8 |
| 2020-01-24 | CVE-2013-1597 | Path Traversal vulnerability in Vivotek Pt7135 Firmware 0300A/0400A A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malicious user obtain user credentials. | 6.5 |
| 2020-01-24 | CVE-2013-1596 | Improper Authentication vulnerability in Vivotek Pt7135 Firmware 0300A/0400A An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554. | 5.3 |