CVE-2020-11949

CVE-2020-11949 affects VIVOTEK Network Cameras and their web service (testserver.cgi) before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXX_Beta2. An authenticated user can obtain arbitrary files from a camera’s local filesystem (affecting devices such as IT9388-HT). The underlying cause is...

CVE-2020-11950

CVE-2020-11950 affects VIVOTEK Network Cameras prior to XXXXX-VVTK-2.2002.xx.01x and prior to XXXXX-VVTK-0XXXX_Beta2, where an authenticated user can upload and execute a script, resulting in OS command execution (example affected device: IT9388-HT).

CVE-2024-7439

CVE-2024-7439 affects Vivotek CC8160 VVTK-0100d: the httpd component’s function read is vulnerable due to manipulation of the Content-Length argument, leading to a stack-based buffer overflow. It can be exploited remotely. Several sources note the affected products are end-of-life and no version ...

CVE-2024-7440

CVE-2024-7440 affects Vivotek CC8160 VVTK-0100d. The vulnerability lies in the function getenv used by the file upload_file.cgi; manipulating the QUERY_STRING enables remote command injection. Exploitation is possible over the network and is described as high impact, with potential for remote exe...