Approved changes feed: RSS · Atom

cpe:2.3:o:vivotek:network_camera_ib8369_firmware:ib8369-vvtk-0102a:*:*:*:*:*:*:*

part: o version: ib8369-vvtk-0102a update: *

VendorVivotek (f3d58ac8-0e4b-5832-9edd-ecd09cb2aa5c)
ProductNetwork Camera Ib8369 Firmware (87b7c6d8-6ffa-5c4f-b3a6-0fea7d755304)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-9829 vulnerable 2026-06-08 05:10:10.680552 Details available
'/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers to read any file on the camera's Linux filesystem via a crafted HTTP request containing ".." sequences. This vulnerability is already verified on VIVOTEK Network Camera IB8369/FD8164/FD816BA; most others have similar firmware that may be affected.
Published: 2017-06-23T22:00:00.000Z
Updated: 2024-09-17T01:26:29.497Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9828 vulnerable 2026-06-08 05:10:10.677394 Details available
'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any shell command as root via a crafted HTTP request. This vulnerability is already verified on VIVOTEK Network Camera IB8369/FD8164/FD816BA; most others have similar firmware that may be affected. An attack uses shell metacharacters in the senderemail parameter.
Published: 2017-06-23T22:00:00.000Z
Updated: 2024-09-16T19:35:20.210Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.