Skip to content
OpenAdvisories

Vendor

Vivotek

12 known vulnerabilities.

Products

IP7137 4 SD9364 2 CC8160 2 Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB93 1 NVR ND8422P 1 NVR ND9525P 1 NVR ND9541P 1 IB8367A 1 Affected device model numbers are FD7131-VVTK,FD7131-VVTK,FD7131-VVTK,FD7141-VVTK,IP7131-VVTK,IP7133-VVTK,IP7133-VVTK,IP7133-VVTK,IP7134-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK, 1 V Series 0 C Series 0 S Series 0 Dome 0 Panoramic 0 Camera 0 Bullet 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.6
    CVE-2025-66052

    Command injection in Vivotek IP7137 cameras

    Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection. Parameter "system_ntpIt" used by "/cgi-bin/admin/setparam.cgi" endpoint is not sanitized properly, allowing a user with administrative privileges to perform an attack. Due t…

    Vivotek IP7137
  • High 8.7
    CVE-2025-66049

    Unprotected RTSP stream in Vivotek IP7137 cameras

    Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554 without requiring authentication. This allows unauthorized users with network a…

    Vivotek IP7137
  • High 8.8
    CVE-2024-7441

    Vivotek SD9364 httpd read stack-based overflow

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been declared as critical. This vulnerability affects the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based…

    Vivotek SD9364
  • High 8.8
    CVE-2024-7439

    Vivotek CC8160 httpd read stack-based overflow

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical. Affected by this issue is the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based buffer …

    Vivotek CC8160