Approved changes feed: RSS · Atom

cpe:2.3:o:vivotek:network_camera_fd816ba_firmware:fd816ba-vvtk-010101.:*:*:*:*:*:*:*

part: o version: fd816ba-vvtk-010101. update: *

VendorVivotek (f3d58ac8-0e4b-5832-9edd-ecd09cb2aa5c)
ProductNetwork Camera Fd816Ba Firmware (7910ee0b-3fdf-5eb9-85f4-29fefe195cb3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-9829 vulnerable 2026-06-08 05:10:10.680746 Details available
'/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers to read any file on the camera's Linux filesystem via a crafted HTTP request containing ".." sequences. This vulnerability is already verified on VIVOTEK Network Camera IB8369/FD8164/FD816BA; most others have similar firmware that may be affected.
Published: 2017-06-23T22:00:00.000Z
Updated: 2024-09-17T01:26:29.497Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9828 vulnerable 2026-06-08 05:10:10.679599 Details available
'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any shell command as root via a crafted HTTP request. This vulnerability is already verified on VIVOTEK Network Camera IB8369/FD8164/FD816BA; most others have similar firmware that may be affected. An attack uses shell metacharacters in the senderemail parameter.
Published: 2017-06-23T22:00:00.000Z
Updated: 2024-09-16T19:35:20.210Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.