PT-2026-1853

Name of the Vulnerable Software and Affected Versions Vivotek IP7137 camera versions prior to 0200a Description The Vivotek IP7137 camera is affected by an information disclosure issue. Live camera footage can be accessed through the Real Time Streaming Protocol RTSP on port 8554 without...

Vivotek IP7137: Operating System Command Injection Vulnerability

The Vivotek IP7137 is an IP camera from China's Vivotek Communications Vivotek. An operating system command injection vulnerability exists in the Vivotek IP7137 version 0200a, which stems from improper cleanup of the parameter systemntpIt, and could lead to a command injection attack...

Vivotek IP7137: Access control error vulnerability

The Vivotek IP7137 is an IP camera from China's VIVOTEK Communications Vivotek. An access control error vulnerability exists in the Vivotek IP7137 version 0200a, which originates from accessing the live camera feed via the RTSP protocol without authentication, which could lead to information...

Vivotek IP7137 has a path traversal vulnerability

The Vivotek IP7137 is an IP camera from China's Vivotek Communications Vivotek. A path traversal vulnerability exists in the Vivotek IP7137 version 0200a, which can be exploited by an authenticated attacker to access resources outside of the web root directory via a direct HTTP request, potential...