Approved changes feed: RSS · Atom

cpe:2.3:o:vivotek:fd8136_firmware:0301a:*:*:*:*:*:*:*

part: o version: 0301a update: *

VendorVivotek (f3d58ac8-0e4b-5832-9edd-ecd09cb2aa5c)
ProductFd8136 Firmware (6d0f76df-1a73-5efa-9e30-e360bd759ece)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-14496 vulnerable 2026-06-08 05:10:52.990126 Details available
Vivotek FD8136 devices allow remote memory corruption and remote code execution because of a stack-based buffer overflow, related to sprintf, vlocal_buff_4326, and set_getparam.cgi. NOTE: The vendor has disputed this as a vulnerability and states that the issue does not cause a web server crash or have any other affect on it's performance
Published: 2019-07-10T13:25:23.000Z
Updated: 2024-08-05T09:29:51.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14495 vulnerable 2026-06-08 05:10:52.989628 Details available
Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection vulnerability in our target device," a different issue than CVE-2018-14494. NOTE: The vendor has disputed this as a vulnerability and states that the issue does not cause a web server crash or have any other affect on it's performance
Published: 2019-07-10T13:20:18.000Z
Updated: 2024-08-05T09:29:51.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14494 vulnerable 2026-06-08 05:10:52.988396 Details available
Vivotek FD8136 devices allow Remote Command Injection, related to BusyBox and wget. NOTE: the vendor sent a clarification on 2019-09-17 explaining that, although this CVE was first populated in July 2019, it is a historical vulnerability that does not apply to any current or recent Vivotek hardware or firmware
Published: 2019-07-10T12:56:42.000Z
Updated: 2024-08-05T09:29:51.666Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.