EUVD-2018-6657

Malware in sbrugna...

Code injection

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 2 of 2 via eventscript.cgi...

CVE-2018-14771

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 2 of 2 via eventscript.cgi...

CVE-2018-14771

CVE-2018-14771 affects VIVOTEK FD8177 network cameras prior to XXXXXX-VVTK-xx06a. The issue is a command-injection vulnerability in eventscript.cgi that enables remote code execution. CVSS v3 base score 8.8 (High) with network access, low attack complexity, and no user interaction; impacts confid...

CVE-2018-14771

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 2 of 2 via eventscript.cgi...

VIVOTEK FD8177 Command Injection Vulnerability

VIVOTEK FD8177 is a network camera product from VIVOTEK. A command injection vulnerability exists in versions prior to VIVOTEK FD8177 XXXXXX-VVTK-xx06a, which can be exploited by remote attackers to execute arbitrary code via the eventscript.cgi file...