CVE-2024-7441

Vivotek SD9364 VVTK-0103f exposes a vulnerability in the httpd read function: manipulating Content-Length causes a stack-based buffer overflow. Exploitation is remote and the exploit has been publicly disclosed. Affected releases are end-of-life with no fix/version details provided in the availab...

CVE-2024-7442

Affected product: Vivotek SD9364 VVTK-0103f. Vulnerable component: getenv in upload_file.cgi. Root cause: manipulation of the QUERY_STRING enables command injection. Exploitation appears to be remote. Notes indicate the affected release tree is end-of-life and maintained by vendor has ended; no p...