13 matches found
EUVD-2020-4286
Malware in sbrugna...
EUVD-2020-4287
Malware in sbrugna...
CVE-2020-11949
testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXXBeta2 allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices...
CVE-2020-11950
VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXXBeta2 allows an authenticated user to upload and execute a script with resultant execution of OS commands. For example, this affects IT9388-HT devices...
CVE-2020-11950
VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXXBeta2 allows an authenticated user to upload and execute a script with resultant execution of OS commands. For example, this affects IT9388-HT devices...
CVE-2020-11949
testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXXBeta2 allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices...
Code injection
testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXXBeta2 allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices...
CVE-2020-11950
CVE-2020-11950 affects VIVOTEK Network Cameras prior to XXXXX-VVTK-2.2002.xx.01x and prior to XXXXX-VVTK-0XXXX_Beta2, where an authenticated user can upload and execute a script, resulting in OS command execution (example affected device: IT9388-HT).
CVE-2020-11949
CVE-2020-11949 affects VIVOTEK Network Cameras and their web service (testserver.cgi) before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXX_Beta2. An authenticated user can obtain arbitrary files from a camera’s local filesystem (affecting devices such as IT9388-HT). The underlying cause is...
CVE-2020-11949
testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXXBeta2 allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices...
CVE-2020-11950: Improper Neutralization of Special Elements used in an OS Command
VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXXBeta2 allows an authenticated user to upload and execute a script with resultant execution of OS commands. For example, this affects IT9388-HT devices...
PT-2020-12943
Name of the Vulnerable Software and Affected Versions VIVOTEK Network Cameras versions before XXXXX-VVTK-2.2002.xx.01x VIVOTEK Network Cameras versions before XXXXX-VVTK-0XXXX Beta2 Description The issue allows an authenticated user to upload and execute a script, resulting in the execution of OS...
CVE-2020-11949: Undefined Security Weakness
testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXXBeta2 allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices...