Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2018-14494
HistoryJul 10, 2019 - 1:15 p.m.

CVE-2018-14494

2019-07-1013:15:10
CWE-78
mitre
web.nvd.nist.gov
25
vivotek
fd8136
remote command injection
busybox
wget
cve-2018-14494
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

70.9%

JSON

Vivotek FD8136 devices allow Remote Command Injection, related to BusyBox and wget. NOTE: the vendor sent a clarification on 2019-09-17 explaining that, although this CVE was first populated in July 2019, it is a historical vulnerability that does not apply to any current or recent Vivotek hardware or firmware

Affected configurations

Nvd
Node
vivotekfd8136_firmwareMatch0301a
AND
vivotekfd8136Match-
VendorProductVersionCPE
vivotekfd8136_firmware0301acpe:2.3:o:vivotek:fd8136_firmware:0301a:*:*:*:*:*:*:*
vivotekfd8136-cpe:2.3:h:vivotek:fd8136:-:*:*:*:*:*:*:*

Related

prion 2
cvelist 2
nvd 2
vulnrichment 1
cve 1
prion
prion
Command injection
2019-07-10 13:15:00
Command injection
2019-07-10 14:15:00
cvelist
cvelist
CVE-2018-14494
2019-07-10 12:56:42
CVE-2018-14495
2019-07-10 13:20:18
nvd
nvd
CVE-2018-14494
2019-07-10 13:15:10
CVE-2018-14495
2019-07-10 14:15:10
vulnrichment
vulnrichment
CVE-2018-14495
2019-07-10 13:20:18
cve
cve
CVE-2018-14495
2019-07-10 14:15:10

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

70.9%

JSON
Related for CVE-2018-14494
prion2cvelist2nvd2vulnrichment1cve1