CVE-2020-11949

testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices.

• vivotek cc9381-hv firmware (<= 0222g) • vivotek fd9360-h firmware (<= 0222g) • vivotek fd9368-htv firmware (<= 0222g) • vivotek fd9380-h firmware (<= 0222g) • vivotek fd9388-htv firmware (<= 0222g) • vivotek ib9360-h firmware (<= 0222g) • vivotek ib9368-ht firmware (<= 0222g) • vivotek ib9380-h firmware (<= 0222g) • vivotek ib9388-ht firmware (<= 0222g) • vivotek it9360-h firmware (<= 0222g) • vivotek it9380-h firmware (<= 0222g) • vivotek it9388-ht firmware (<= 0222g) • vivotek md9560-dh firmware (<= 0222g) • vivotek md9560-h firmware (<= 0222g) • vivotek fd9366-hv firmware (<= 0222g) • vivotek fd9166-hn firmware (<= 0222g) • vivotek fe9380-hv firmware (<= 0222k) • vivotek cc8160 firmware (<= 0113b) • vivotek cc8160\(hs\) firmware (<= 0113b) • vivotek cc8370-hv firmware (<= 0213b) • vivotek cc8371-hv firmware (<= 0113b) • vivotek cd8371-hntv firmware (<= 0113b) • vivotek cd8371-hnvf2 firmware (<= 0113b) • vivotek fd8166a firmware (<= 0213b) • vivotek fd8166a-n firmware (<= 0113b) • vivotek fd8167a firmware (<= 0213b) • vivotek fd8169a firmware (<= 0213b) • vivotek fd8367a-v firmware (<= 0213b) • vivotek fd8369a-v firmware (<= 0213b) • vivotek fd816ba-hf2 firmware (<= 0113b) • vivotek fd836ba-hvf2 firmware (<= 0113b) • vivotek fd836ba-htv firmware (<= 0113b) • vivotek fd836ba-ehvf2 firmware (<= 0113b) • vivotek fd816ba-ht firmware (<= 0113b) • vivotek fd836ba-ehtv firmware (<= 0113b) • vivotek ib836ba-ehf3 firmware (<= 0113b) • vivotek ib836ba-eht firmware (<= 0113b) • vivotek ib836ba-hf3 firmware (<= 0113b) • vivotek ib836ba-ht firmware (<= 0113b) • vivotek fd816b-hf2 firmware (<= 0113b) • vivotek fd816b-ht firmware (<= 0113b) • vivotek fd836b-ehtv firmware (<= 0113b) • vivotek fd836b-ehvf2 firmware (<= 0113b) • vivotek fd836b-htv firmware (<= 0113b) • vivotek fd836b-hvf2 firmware (<= 0113b) • vivotek ib836b-ehf3 firmware (<= 0113b) • vivotek ib836b-eht firmware (<= 0113b) • vivotek ib836b-hf3 firmware (<= 0113b) • vivotek ib836b-hrf3 firmware (<= 0113b) • vivotek ib836b-ht firmware (<= 0113b) • vivotek fd816ca-hf2 firmware (<= 0113b) • vivotek fd816c-hf2 firmware (<= 0213b) • vivotek fd8182-f1 firmware (<= 0113b) • vivotek fd8182-f2 firmware (<= 0113b) • vivotek fd8182-t firmware (<= 0113b) • vivotek fd8382-etv firmware (<= 0113b) • vivotek fd8382-evf2 firmware (<= 0113b) • vivotek fd8382-tv firmware (<= 0113b) • vivotek fd8382-vf2 firmware (<= 0113b) • vivotek ib8382-ef3 firmware (<= 0113b) … and 134 more