GCVE - cpe:2.3:h:vivotek:cc8160:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:vivotek:cc8160:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Vivotek (`f3d58ac8-0e4b-5832-9edd-ecd09cb2aa5c`)
Product	Cc8160 (`58a1c75a-69d6-52cb-b10c-e04527e29af3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-7440`	not_vulnerable	2026-06-08 06:58:22.190728	Vivotek CC8160 upload_file.cgi getenv command injection MEDIUM (6.3) UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Vivotek CC8160 VVTK-0100d. It has been classified as critical. This affects the function getenv of the file upload_file.cgi. The manipulation of the argument QUERY_STRING leads to command injection. It is possible to initiate the attack remotely. The identifier VDB-273525 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life. Published: 2024-08-03T16:31:04.256Z Updated: 2024-08-07T20:36:03.492Z Open on db.gcve.eu Reference links https://vuldb.com/?id.273525 https://vuldb.com/?ctiid.273525 https://vuldb.com/?submit.383839 https://yjz233.notion.site/0213043a8c7e498a9e73a0b6f0fa9f29?pvs=4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7439`	not_vulnerable	2026-06-08 06:58:22.189887	Vivotek CC8160 httpd read stack-based overflow HIGH (8.8) UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical. Affected by this issue is the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273524. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life. Published: 2024-08-03T16:00:07.798Z Updated: 2024-08-05T15:09:25.672Z Open on db.gcve.eu Reference links https://vuldb.com/?id.273524 https://vuldb.com/?ctiid.273524 https://vuldb.com/?submit.383830 https://yjz233.notion.site/vivotek-CC8160-has-stack-buffer-overflow-vulnerability-in-httpd-8409f967d3064493b649720f36d59081?pvs=4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7439`	vulnerable	2026-06-08 06:58:22.188231	Vivotek CC8160 httpd read stack-based overflow HIGH (8.8) UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical. Affected by this issue is the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273524. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life. Published: 2024-08-03T16:00:07.798Z Updated: 2024-08-05T15:09:25.672Z Open on db.gcve.eu Reference links https://vuldb.com/?id.273524 https://vuldb.com/?ctiid.273524 https://vuldb.com/?submit.383830 https://yjz233.notion.site/vivotek-CC8160-has-stack-buffer-overflow-vulnerability-in-httpd-8409f967d3064493b649720f36d59081?pvs=4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-11950`	not_vulnerable	2026-06-08 05:17:55.727590	Details available VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution of OS commands). For example, this affects IT9388-HT devices. Published: 2020-05-28T12:44:36.000Z Updated: 2024-08-04T11:42:00.764Z Open on db.gcve.eu Reference links http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2020-001-v1.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-11949`	not_vulnerable	2026-06-08 05:17:55.431639	Details available testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices. Published: 2020-05-28T12:43:32.000Z Updated: 2024-08-04T11:42:00.838Z Open on db.gcve.eu Reference links http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2020-001-v1.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.