Vivotek
Vivotek Camera: vulnerabilidades y CVE
Vivotek Camera tiene 10 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2019-14458 | Alta (7.5) | 1.9% | — | 18 sept 2019 | VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header. |
| CVE-2019-10256 | Crítica (9.8) | 1.3% | — | 10 sept 2019 | An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found. |
| CVE-2019-14457 | Crítica (9.8) | 2.6% | — | 10 sept 2019 | VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header. |
| CVE-2018-18244 | Media (6.1) | 0.80% | — | 3 ene 2019 | Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header. |
| CVE-2018-18005 | Media (6.1) | 0.80% | — | 3 ene 2019 | Cross-site scripting in event_script.js in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript via a URL query string parameter. |
| CVE-2018-18004 | Media (5.3) | 0.93% | — | 3 ene 2019 | Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable arbitrary system services via a URL parameter. |
| CVE-2018-14771 | Alta (8.8) | 3.0% | — | 5 sept 2018 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi. |
| CVE-2018-14770 | Alta (8.8) | 3.0% | — | 5 sept 2018 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service). |
| CVE-2018-14769 | Alta (8.8) | 0.47% | — | 5 sept 2018 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF. |
| CVE-2018-14768 | Alta (8.8) | 2.9% | — | 29 ago 2018 | Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code. |