HIGH🇵🇱 Wersja polska

CVE-2018-14770

CVSS 8.8v3.0pub. 2018-09-05upd. 2024-11-21

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service).

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Vivotek Camera

    HW
    Vivotek
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2024-26548CRITICAL9.8PL ✓same product

RCE w Vivotek Network Camera poprzez komponent upload_file.cgi

CVE-2019-10256CRITICAL9.8PL ✓same product

Obejście uwierzytelnienia w kamerach VIVOTEK IPCam

CVE-2019-14457CRITICAL9.8PL ✓same product

Stack-based buffer overflow w kamerach IP VIVOTEK przez spreparowany nagłówek HTTP

CVE-2019-14458HIGH7.5same product

VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header.

CVE-2018-14769HIGH8.8same product

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF.