EUVD-2018-6657

Malware in sbrugna...

Code injection

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 2 of 2 via eventscript.cgi...

Cross site request forgery (csrf)

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF...

Code injection

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 1 of 2 via the ONVIF interface, /onvif/deviceservice...

CVE-2018-14770

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 1 of 2 via the ONVIF interface, /onvif/deviceservice...

CVE-2018-14771

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 2 of 2 via eventscript.cgi...

CVE-2018-14769

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF...

CVE-2018-14770

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 1 of 2 via the ONVIF interface, /onvif/deviceservice...

CVE-2018-14771

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 2 of 2 via eventscript.cgi...

CVE-2018-14769

CVE-2018-14769 affects VIVOTEK FD8177 devices prior to the firmware version XXXXXX-VVTK-xx06a, where a CSRF vulnerability exists. The NVD entry shows a CVSS-3 base score of 8.8 (HIGH) with network attack vector, low attack complexity, no privileges required, and user interaction required; impact ...

CVE-2018-14769

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF...

CVE-2018-14771

CVE-2018-14771 affects VIVOTEK FD8177 network cameras prior to XXXXXX-VVTK-xx06a. The issue is a command-injection vulnerability in eventscript.cgi that enables remote code execution. CVSS v3 base score 8.8 (High) with network access, low attack complexity, and no user interaction; impacts confid...

CVE-2018-14770

VIVOTEK FD8177 network cameras are affected by CVE-2018-14770 via the ONVIF interface, specifically the /onvif/device_service endpoint. The root cause is described as a command injection vulnerability that can allow remote attackers to execute arbitrary code. The issue affects FD8177 devices prio...

CVE-2018-14771: Undefined Security Weakness

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 2 of 2 via eventscript.cgi...

CVE-2018-14770: Undefined Security Weakness

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 1 of 2 via the ONVIF interface, /onvif/deviceservice...

PT-2018-12709

Name of the Vulnerable Software and Affected Versions VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a Description The issue allows for Cross-Site Request Forgery CSRF attacks. Recommendations For VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a, update to a version that includes the fix for this...

PT-2018-12711

Name of the Vulnerable Software and Affected Versions VIVOTEK FD8177 devices affected versions not specified Description The issue allows remote attackers to execute arbitrary code via the eventscript.cgi endpoint. Recommendations At the moment, there is no information about a newer version that...

CVE-2018-14769: Cross-Site Request Forgery (CSRF)

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF...

PT-2018-12710

Name of the Vulnerable Software and Affected Versions VIVOTEK FD8177 devices affected versions not specified Description The issue allows remote attackers to execute arbitrary code via the ONVIF interface, specifically through the /onvif/device service API endpoint. Recommendations At the moment,...

VIVOTEK FD8177 Command Injection Vulnerability (CNVD-2019-06203)

VIVOTEK FD8177 is a network camera product from VIVOTEK. A command injection vulnerability exists in previous versions of VIVOTEK FD8177 XXXXXX-VVTK-xx06a, which can be exploited by remote attackers to execute arbitrary code via the ONVIF interface...