CVEvulnerability

CVE-2020-11950

8.8 HIGH Published 2020-05-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-05-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-78

Description

VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution of OS commands). For example, this affects IT9388-HT devices.

Affected configurations

• vivotek cc9381-hv firmware (<= 0222g) • vivotek fd9360-h firmware (<= 0222g) • vivotek fd9368-htv firmware (<= 0222g) • vivotek fd9380-h firmware (<= 0222g) • vivotek fd9388-htv firmware (<= 0222g) • vivotek ib9360-h firmware (<= 0222g) • vivotek ib9368-ht firmware (<= 0222g) • vivotek ib9380-h firmware (<= 0222g) • vivotek ib9388-ht firmware (<= 0222g) • vivotek it9360-h firmware (<= 0222g) • vivotek it9380-h firmware (<= 0222g) • vivotek it9388-ht firmware (<= 0222g) • vivotek md9560-dh firmware (<= 0222g) • vivotek md9560-h firmware (<= 0222g) • vivotek fd9366-hv firmware (<= 0222g) • vivotek fd9166-hn firmware (<= 0222g) • vivotek fe9380-hv firmware (<= 0222g) • vivotek cc8160 firmware (<= 0222g) • vivotek cc8160\(hs\) firmware (<= 0222g) • vivotek cc8370-hv firmware (<= 0222g) • vivotek cc8371-hv firmware (<= 0222g) • vivotek cd8371-hntv firmware (<= 0222g) • vivotek cd8371-hnvf2 firmware (<= 0222g) • vivotek fd8166a firmware (<= 0222g) • vivotek fd8166a-n firmware (<= 0222g) • vivotek fd8167a firmware (<= 0222g) • vivotek fd8167a-s firmware (<= 0222g) • vivotek fd8169a firmware (<= 0222g) • vivotek fd8169a-s firmware (<= 0222g) • vivotek fd8367a-v firmware (<= 0222g) • vivotek fd8369a-v firmware (<= 0222g) • vivotek fd816ba-hf2 firmware (<= 0222g) • vivotek fd836ba-hvf2 firmware (<= 0222g) • vivotek fd836ba-htv firmware (<= 0222g) • vivotek fd836ba-ehvf2 firmware (<= 0222g) • vivotek fd816ba-ht firmware (<= 0222g) • vivotek fd836ba-ehtv firmware (<= 0222g) • vivotek ib836ba-ehf3 firmware (<= 0222g) • vivotek ib836ba-eht firmware (<= 0222g) • vivotek ib836ba-hf3 firmware (<= 0222g) • vivotek ib836ba-ht firmware (<= 0222g) • vivotek fd816b-hf2 firmware (<= 0222g) • vivotek fd816b-ht firmware (<= 0222g) • vivotek fd836b-ehtv firmware (<= 0222g) • vivotek fd836b-ehvf2 firmware (<= 0222g) • vivotek fd836b-htv firmware (<= 0222g) • vivotek fd836b-hvf2 firmware (<= 0222g) • vivotek ib836b-ehf3 firmware (<= 0222g) • vivotek ib836b-eht firmware (<= 0222g) • vivotek ib836b-hf3 firmware (<= 0222g) • vivotek ib836b-hrf3 firmware (<= 0222g) • vivotek ib836b-ht firmware (<= 0222g) • vivotek fd816ca-hf2 firmware (<= 0222g) • vivotek fd816c-hf2 firmware (<= 0222g) • vivotek fe8182 firmware (<= 0222g) • vivotek fd8182-f1 firmware (<= 0222g) • vivotek fd8182-f2 firmware (<= 0222g) • vivotek fd8182-t firmware (<= 0222g) • vivotek fd8382-etv firmware (<= 0222g) • vivotek fd8382-evf2 firmware (<= 0222g) … and 140 more

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References