EUVD-2018-6657

Malware in sbrugna...

Code injection

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 2 of 2 via eventscript.cgi...

CVE-2018-14771

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 2 of 2 via eventscript.cgi...

CVE-2018-14771

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 2 of 2 via eventscript.cgi...

CVE-2018-14770

VIVOTEK FD8177 network cameras are affected by CVE-2018-14770 via the ONVIF interface, specifically the /onvif/device_service endpoint. The root cause is described as a command injection vulnerability that can allow remote attackers to execute arbitrary code. The issue affects FD8177 devices prio...

CVE-2018-14770

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 1 of 2 via the ONVIF interface, /onvif/deviceservice...

CVE-2018-14769: Cross-Site Request Forgery (CSRF)

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF...

CVE-2018-14770: Undefined Security Weakness

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 1 of 2 via the ONVIF interface, /onvif/deviceservice...

CVE-2018-14771: Undefined Security Weakness

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 2 of 2 via eventscript.cgi...

PT-2018-12711

Name of the Vulnerable Software and Affected Versions VIVOTEK FD8177 devices affected versions not specified Description The issue allows remote attackers to execute arbitrary code via the eventscript.cgi endpoint. Recommendations At the moment, there is no information about a newer version that...

PT-2018-12710

Name of the Vulnerable Software and Affected Versions VIVOTEK FD8177 devices affected versions not specified Description The issue allows remote attackers to execute arbitrary code via the ONVIF interface, specifically through the /onvif/device service API endpoint. Recommendations At the moment,...

PT-2018-12709

Name of the Vulnerable Software and Affected Versions VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a Description The issue allows for Cross-Site Request Forgery CSRF attacks. Recommendations For VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a, update to a version that includes the fix for this...

VIVOTEK FD8177 Command Injection Vulnerability (CNVD-2019-06203)

VIVOTEK FD8177 is a network camera product from VIVOTEK. A command injection vulnerability exists in previous versions of VIVOTEK FD8177 XXXXXX-VVTK-xx06a, which can be exploited by remote attackers to execute arbitrary code via the ONVIF interface...

VIVOTEK FD8177 Command Injection Vulnerability

VIVOTEK FD8177 is a network camera product from VIVOTEK. A command injection vulnerability exists in versions prior to VIVOTEK FD8177 XXXXXX-VVTK-xx06a, which can be exploited by remote attackers to execute arbitrary code via the eventscript.cgi file...