CVE-2018-18244

Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header...

CVE-2018-18004

Incorrect Access Control in modinetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable arbitrary system services via a URL parameter...

CVE-2018-18005

Summary: CVE-2018-18005 affects VIVOTEK Network Camera Series devices. The vulnerability is a cross-site scripting (XSS) flaw in the JavaScript file event_script.js, exploitable on firmware versions 0x06x to 0x08x. A remote attacker can cause arbitrary JavaScript execution by supplying a crafted ...

CVE-2018-18004

CVE-2018-18004 affects VIVOTEK Network Camera Series via mod_inetd.cgi in firmware before XXXXXX-VVTK-0X09a. Root cause: incorrect access control that permits remote attackers to trigger arbitrary system services through a URL parameter. Impact: potential partial integrity impact by enabling unin...

CVE-2018-18244

Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header...

CVE-2018-18005

Cross-site scripting in eventscript.js in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript via a URL query string parameter...

CVE-2018-18244

The CVE-2018-18244 entry corresponds to a cross-site scripting vulnerability in VIVOTEK Network Camera Series. The affected component is the syslog.html page, exploitable on firmware versions 0x06x to 0x08x. An attacker can remotely inject and execute arbitrary JavaScript in the context of a user...

Code injection

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 1 of 2 via the ONVIF interface, /onvif/deviceservice...

Code injection

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 2 of 2 via eventscript.cgi...

CVE-2018-14771

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 2 of 2 via eventscript.cgi...

Cross site request forgery (csrf)

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF...

CVE-2018-14770

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 1 of 2 via the ONVIF interface, /onvif/deviceservice...

CVE-2018-14769

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF...

CVE-2018-14769

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF...

CVE-2018-14770

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 1 of 2 via the ONVIF interface, /onvif/deviceservice...

CVE-2018-14769

CVE-2018-14769 affects VIVOTEK FD8177 devices prior to the firmware version XXXXXX-VVTK-xx06a, where a CSRF vulnerability exists. The NVD entry shows a CVSS-3 base score of 8.8 (HIGH) with network attack vector, low attack complexity, no privileges required, and user interaction required; impact ...

CVE-2018-14771

CVE-2018-14771 affects VIVOTEK FD8177 network cameras prior to XXXXXX-VVTK-xx06a. The issue is a command-injection vulnerability in eventscript.cgi that enables remote code execution. CVSS v3 base score 8.8 (High) with network access, low attack complexity, and no user interaction; impacts confid...

CVE-2018-14771

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code issue 2 of 2 via eventscript.cgi...

CVE-2018-14770

VIVOTEK FD8177 network cameras are affected by CVE-2018-14770 via the ONVIF interface, specifically the /onvif/device_service endpoint. The root cause is described as a command injection vulnerability that can allow remote attackers to execute arbitrary code. The issue affects FD8177 devices prio...

VIVOTEK FD8177 Command Injection Vulnerability (CNVD-2019-06203)

VIVOTEK FD8177 is a network camera product from VIVOTEK. A command injection vulnerability exists in previous versions of VIVOTEK FD8177 XXXXXX-VVTK-xx06a, which can be exploited by remote attackers to execute arbitrary code via the ONVIF interface...