CVE-2017-9829

'/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers to read any file on the camera's Linux filesystem via a crafted HTTP request containing ".." sequences. This vulnerability is already verified on VIVOTEK...

VIVOTEK Network Camera Directory Traversal (CVE-2017-9829)

A directory traversal vulnerability exists in VIVOTEK Network Cameras. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

CVE-2017-9829

'/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers to read any file on the camera's Linux filesystem via a crafted HTTP request containing ".." sequences. This vulnerability is already verified on VIVOTEK...

CVE-2017-9829

CVE-2017-9829 affects VIVOTEK Network Cameras (IB8369, FD8164, FD816BA; with similar firmware) via /cgi-bin/admin/downloadMedias.cgi, allowing remote attackers to read arbitrary files on the device by crafting HTTP requests containing .. sequences. The vulnerability is documented as directory tra...