CVE-2020-11949

CVE-2020-11949 affects VIVOTEK Network Cameras and their web service (testserver.cgi) before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXX_Beta2. An authenticated user can obtain arbitrary files from a camera’s local filesystem (affecting devices such as IT9388-HT). The underlying cause is...