VITEC records

4 published records for vendor vitec.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2021-42109No exploit	VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.vitec · exterity avediaserver · CWE-1188 Pre-auth	Critical9.8	—	1.7%	Oct 8, 2021
38Monitor	CVE-2026-61498No exploit	Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.phpvitec · flamingo · CWE-78 pre-auth RCE Command injection	Critical9.3	—	4.0%	Jul 13, 2026
38Monitor	CVE-2026-60121Proof of concept	Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.phpvitec · flamingo · CWE-78 pre-auth RCE Command injection	Critical9.3	—	3.3%	Jul 13, 2026
35Monitor	CVE-2024-35102No exploit	Insecure Permissions vulnerability in VITEC AvediaServer (Model avsrv-m8105) 8.6.2-1 allows a remote attacker to escalate privileges via a c	High8.8	—	0.5%	May 15, 2024

CVE-2021-42109
39Monitor
VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
vitec · exterity avediaserverOct 8, 2021
CVE-2026-61498
38Monitor
Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.php
CriticalCVSS 9.3No exploitEPSS 4%
- pre-auth RCE
- Command injection
vitec · flamingoJul 13, 2026
CVE-2026-60121
38Monitor
Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.php
CriticalCVSS 9.3Proof of conceptEPSS 3%
- pre-auth RCE
- Command injection
vitec · flamingoJul 13, 2026
CVE-2024-35102
35Monitor
Insecure Permissions vulnerability in VITEC AvediaServer (Model avsrv-m8105) 8.6.2-1 allows a remote attacker to escalate privileges via a c
HighCVSS 8.8No exploitEPSS 1%
May 15, 2024