Skip to content
OpenAdvisories

Vendor

Vivotek

12 known vulnerabilities.

Products

IP7137 4 SD9364 2 CC8160 2 Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB93 1 NVR ND8422P 1 NVR ND9525P 1 NVR ND9541P 1 IB8367A 1 Affected device model numbers are FD7131-VVTK,FD7131-VVTK,FD7131-VVTK,FD7141-VVTK,IP7131-VVTK,IP7133-VVTK,IP7133-VVTK,IP7133-VVTK,IP7134-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK, 1 V Series 0 C Series 0 S Series 0 Dome 0 Panoramic 0 Camera 0 Bullet 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-66051

    Path traversal in Vivotek IP7137 cameras

    Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal. It is possible for an authenticated attacker to access resources beyond webroot directory using a direct HTTP request. Due to CVE-2025-66050, a password for administration pane…

    Vivotek IP7137
  • Medium 6.3
    CVE-2024-7443

    Vivotek IB8367A upload_file.cgi getenv command injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Vivotek IB8367A VVTK-0100b. Affected is the function getenv of the file upload_file.cgi. The manipulation of the argument QUERY_STRING leads to command injection. It is p…

    Vivotek IB8367A
  • Medium 6.3
    CVE-2024-7442

    Vivotek SD9364 upload_file.cgi getenv command injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been rated as critical. This issue affects the function getenv of the file upload_file.cgi. The manipulation of the argument QUERY_STRING leads to command injection…

    Vivotek SD9364
  • Medium 6.3
    CVE-2024-7440

    Vivotek CC8160 upload_file.cgi getenv command injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d. It has been classified as critical. This affects the function getenv of the file upload_file.cgi. The manipulation of the argument QUERY_STRING leads to command injection.…

    Vivotek CC8160