Vivotek kayıtları
vivotek üreticisine ait 41 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 11
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6
- CWE-121 Stack-based Buffer Overflow5
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')3
- CWE-787 Out-of-bounds Write2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
41 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
64Bu hafta | CVE-2017-9828İstismar yok | '/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which alvivotek · network camera ib8369 firmware · CWE-78 | Kritik9,8 | — | %82,5 | 23 Haz 2017 |
51Planlayın | CVE-2017-9829İstismar yok | '/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers tvivotek · network camera ib8369 firmware · CWE-22 | Yüksek7,5 | — | %68,7 | 23 Haz 2017 |
51Planlayın | CVE-2013-1595Kavram kanıtı | A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization headevivotek · pt7135 firmware · CWE-120 | Kritik9,8 | — | %41,6 | 24 Oca 2020 |
41Planlayın | CVE-2013-1598Kavram kanıtı | A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binaryvivotek · pt7135 firmware · CWE-78 | Yüksek8,8 | — | %20,5 | 24 Oca 2020 |
40Planlayın | CVE-2018-14495İstismar yok | Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection vulnerability in our target device," a different issuevivotek · fd8136 firmware · CWE-78 | Kritik9,8 | — | %4,4 | 10 Tem 2019 |
40Planlayın | CVE-2018-14496İstismar yok | Vivotek FD8136 devices allow remote memory corruption and remote code execution because of a stack-based buffer overflow, related to sprintfvivotek · fd8136 firmware · CWE-787 | Kritik9,8 | — | %4,1 | 10 Tem 2019 |
40Planlayın | CVE-2018-14494İstismar yok | Vivotek FD8136 devices allow Remote Command Injection, related to BusyBox and wget.vivotek · fd8136 firmware · CWE-78 | Kritik9,8 | — | %3,2 | 10 Tem 2019 |
40Planlayın | CVE-2019-14457İstismar yok | VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header.vivotek · camera · CWE-787 | Kritik9,8 | — | %2,6 | 10 Eyl 2019 |
39İzleyin | CVE-2008-4771Kavram kanıtı | Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class (VATDecoder.dll 1.0.0.27 and 1.0.0.51), (2) D-4xem · vatctrl class · CWE-119 | Kritik9,3 | — | %7,1 | 28 Eki 2008 |
39İzleyin | CVE-2019-10256İstismar yok | An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found.vivotek · camera | Kritik9,8 | — | %1,3 | 10 Eyl 2019 |
39İzleyin | CVE-2024-26548İstismar yok | An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the uplovivotek · camera firmware | Kritik9,8 | — | %1,1 | 29 Şub 2024 |
37İzleyin | CVE-2025-66050İstismar yok | No password set for administrative account in Vivotek IP7137 camerasvivotek · ip7137 firmware · CWE-1393 | Kritik9,3 | — | %0,4 | 9 Oca 2026 |
36İzleyin | CVE-2024-7441İstismar yok | Vivotek SD9364 httpd read stack-based overflowvivotek · sd9364 firmware · CWE-121 | Yüksek8,7 | — | %8,1 | 3 Ağu 2024 |
36İzleyin | CVE-2018-14771İstismar yok | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi.vivotek · camera | Yüksek8,8 | — | %3,0 | 5 Eyl 2018 |
36İzleyin | CVE-2018-14770İstismar yok | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/ovivotek · camera | Yüksek8,8 | — | %3,0 | 5 Eyl 2018 |
36İzleyin | CVE-2018-14768İstismar yok | Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before XXXXXX-VVTK-xx06a allow remote attackers to evivotek · camera | Yüksek8,8 | — | %2,9 | 29 Ağu 2018 |
36İzleyin | CVE-2020-11950İstismar yok | VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execuvivotek · cc9381-hv firmware · CWE-78 | Yüksek8,8 | — | %2,7 | 28 May 2020 |
35İzleyin | CVE-2026-30650İstismar yok | A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivvivotek · fd8136 firmware · CWE-120 | Yüksek8,8 | — | %0,9 | 2 Haz 2026 |
35İzleyin | CVE-2026-30652İstismar yok | A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras runnivivotek · fd8136 firmware · CWE-120 | Yüksek8,8 | — | %0,8 | 2 Haz 2026 |
35İzleyin | CVE-2018-14769İstismar yok | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF.vivotek · camera · CWE-352 | Yüksek8,8 | — | %0,5 | 5 Eyl 2018 |
34İzleyin | CVE-2025-66052İstismar yok | Command injection in Vivotek IP7137 camerasvivotek · ip7137 firmware · CWE-78 | Yüksek8,6 | — | %1,5 | 9 Oca 2026 |
34İzleyin | CVE-2024-7439İstismar yok | Vivotek CC8160 httpd read stack-based overflowvivotek · cc8160 firmware · CWE-121 | Yüksek8,7 | — | %1,0 | 3 Ağu 2024 |
34İzleyin | CVE-2025-66049İstismar yok | Unprotected RTSP stream in Vivotek IP7137 camerasvivotek · ip7137 firmware · CWE-306 | Yüksek8,7 | — | %0,4 | 9 Oca 2026 |
33İzleyin | CVE-2013-4985Kavram kanıtı | Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video streamvivotek · ip7160 firmware · CWE-863 | Yüksek7,5 | — | %9,0 | 27 Ara 2019 |
32İzleyin | CVE-2013-1594Kavram kanıtı | An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd pavivotek · pt7135 firmware · CWE-200 | Yüksek7,5 | — | %7,3 | 24 Oca 2020 |
- CVE-2017-982864Bu hafta
'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which al
KritikCVSS 9,8İstismar yokEPSS %82vivotek · network camera ib8369 firmware23 Haz 2017
- CVE-2017-982951Planlayın
'/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers t
YüksekCVSS 7,5İstismar yokEPSS %69vivotek · network camera ib8369 firmware23 Haz 2017
- CVE-2013-159551Planlayın
A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization heade
KritikCVSS 9,8Kavram kanıtıEPSS %42vivotek · pt7135 firmware24 Oca 2020
- CVE-2013-159841Planlayın
A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary
YüksekCVSS 8,8Kavram kanıtıEPSS %20vivotek · pt7135 firmware24 Oca 2020
- CVE-2018-1449540Planlayın
Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection vulnerability in our target device," a different issue
KritikCVSS 9,8İstismar yokEPSS %4vivotek · fd8136 firmware10 Tem 2019
- CVE-2018-1449640Planlayın
Vivotek FD8136 devices allow remote memory corruption and remote code execution because of a stack-based buffer overflow, related to sprintf
KritikCVSS 9,8İstismar yokEPSS %4vivotek · fd8136 firmware10 Tem 2019
- CVE-2018-1449440Planlayın
Vivotek FD8136 devices allow Remote Command Injection, related to BusyBox and wget.
KritikCVSS 9,8İstismar yokEPSS %3vivotek · fd8136 firmware10 Tem 2019
- CVE-2019-1445740Planlayın
VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header.
KritikCVSS 9,8İstismar yokEPSS %3vivotek · camera10 Eyl 2019
- CVE-2008-477139İzleyin
Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class (VATDecoder.dll 1.0.0.27 and 1.0.0.51), (2) D-
KritikCVSS 9,3Kavram kanıtıEPSS %74xem · vatctrl class28 Eki 2008
- CVE-2019-1025639İzleyin
An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found.
KritikCVSS 9,8İstismar yokEPSS %1vivotek · camera10 Eyl 2019
- CVE-2024-2654839İzleyin
An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the uplo
KritikCVSS 9,8İstismar yokEPSS %1vivotek · camera firmware29 Şub 2024
- CVE-2025-6605037İzleyin
No password set for administrative account in Vivotek IP7137 cameras
KritikCVSS 9,3İstismar yokEPSS %0vivotek · ip7137 firmware9 Oca 2026
- CVE-2024-744136İzleyin
Vivotek SD9364 httpd read stack-based overflow
YüksekCVSS 8,7İstismar yokEPSS %8vivotek · sd9364 firmware3 Ağu 2024
- CVE-2018-1477136İzleyin
VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi.
YüksekCVSS 8,8İstismar yokEPSS %3vivotek · camera5 Eyl 2018
- CVE-2018-1477036İzleyin
VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/o
YüksekCVSS 8,8İstismar yokEPSS %3vivotek · camera5 Eyl 2018
- CVE-2018-1476836İzleyin
Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before XXXXXX-VVTK-xx06a allow remote attackers to e
YüksekCVSS 8,8İstismar yokEPSS %3vivotek · camera29 Ağu 2018
- CVE-2020-1195036İzleyin
VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execu
YüksekCVSS 8,8İstismar yokEPSS %3vivotek · cc9381-hv firmware28 May 2020
- CVE-2026-3065035İzleyin
A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Viv
YüksekCVSS 8,8İstismar yokEPSS %1vivotek · fd8136 firmware2 Haz 2026
- CVE-2026-3065235İzleyin
A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras runni
YüksekCVSS 8,8İstismar yokEPSS %1vivotek · fd8136 firmware2 Haz 2026
- CVE-2018-1476935İzleyin
VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF.
YüksekCVSS 8,8İstismar yokEPSS %0vivotek · camera5 Eyl 2018
- CVE-2025-6605234İzleyin
Command injection in Vivotek IP7137 cameras
YüksekCVSS 8,6İstismar yokEPSS %2vivotek · ip7137 firmware9 Oca 2026
- CVE-2024-743934İzleyin
Vivotek CC8160 httpd read stack-based overflow
YüksekCVSS 8,7İstismar yokEPSS %1vivotek · cc8160 firmware3 Ağu 2024
- CVE-2025-6604934İzleyin
Unprotected RTSP stream in Vivotek IP7137 cameras
YüksekCVSS 8,7İstismar yokEPSS %0vivotek · ip7137 firmware9 Oca 2026
- CVE-2013-498533İzleyin
Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream
YüksekCVSS 7,5Kavram kanıtıEPSS %9vivotek · ip7160 firmware27 Ara 2019
- CVE-2013-159432İzleyin
An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd pa
YüksekCVSS 7,5Kavram kanıtıEPSS %7vivotek · pt7135 firmware24 Oca 2020