CVE-2020-11949
Medium
Description
testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices.
SeverityMedium
CVSS6.5
Exploit probability—
ProductVivotek It9388-ht Firmware
PublishedMay 28, 2020
First seenMay 28, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vivotek it9388-ht_firmware | v ≤ 0222g | — |
| vivotek cc9381-hv_firmware | v ≤ 0222g | — |
| vivotek fd9360-h_firmware | v ≤ 0222g | — |
| vivotek fd9368-htv_firmware | v ≤ 0222g | — |
| vivotek fd9380-h_firmware | v ≤ 0222g | — |
| vivotek fd9388-htv_firmware | v ≤ 0222g | — |
| vivotek ib9360-h_firmware | v ≤ 0222g | — |
| vivotek ib9368-ht_firmware | v ≤ 0222g | — |
| vivotek ib9380-h_firmware | v ≤ 0222g | — |
| vivotek ib9388-ht_firmware | v ≤ 0222g | — |
| vivotek it9360-h_firmware | v ≤ 0222g | — |
| vivotek it9380-h_firmware | v ≤ 0222g | — |
| vivotek md9560-dh_firmware | v ≤ 0222g | — |
| vivotek md9560-h_firmware | v ≤ 0222g | — |
| vivotek fd9366-hv_firmware | v ≤ 0222g | — |
| vivotek fd9166-hn_firmware | v ≤ 0222g | — |
| vivotek fe9380-hv_firmware | v ≤ 0222k | — |
| vivotek cc8160_firmware | v ≤ 0113b | — |
| vivotek cc8160\(hs\)_firmware | v ≤ 0113b | — |
| vivotek cc8370-hv_firmware | v ≤ 0213b | — |
| vivotek cc8371-hv_firmware | v ≤ 0113b | — |
| vivotek cd8371-hntv_firmware | v ≤ 0113b | — |
| vivotek cd8371-hnvf2_firmware | v ≤ 0113b | — |
| vivotek fd8166a_firmware | v ≤ 0213b | — |
| vivotek fd8166a-n_firmware | v ≤ 0113b | — |
| vivotek fd8167a_firmware | v ≤ 0213b | — |
| vivotek fd8169a_firmware | v ≤ 0213b | — |
| vivotek fd8367a-v_firmware | v ≤ 0213b | — |
| vivotek fd8369a-v_firmware | v ≤ 0213b | — |
| vivotek fd816ba-hf2_firmware | v ≤ 0113b | — |
| vivotek fd836ba-hvf2_firmware | v ≤ 0113b | — |
| vivotek fd836ba-htv_firmware | v ≤ 0113b | — |
| vivotek fd836ba-ehvf2_firmware | v ≤ 0113b | — |
| vivotek fd816ba-ht_firmware | v ≤ 0113b | — |
| vivotek fd836ba-ehtv_firmware | v ≤ 0113b | — |
| vivotek ib836ba-ehf3_firmware | v ≤ 0113b | — |
| vivotek ib836ba-eht_firmware | v ≤ 0113b | — |
| vivotek ib836ba-hf3_firmware | v ≤ 0113b | — |
| vivotek ib836ba-ht_firmware | v ≤ 0113b | — |
| vivotek fd816b-hf2_firmware | v ≤ 0113b | — |
| vivotek fd816b-ht_firmware | v ≤ 0113b | — |
| vivotek fd836b-ehtv_firmware | v ≤ 0113b | — |
| vivotek fd836b-ehvf2_firmware | v ≤ 0113b | — |
| vivotek fd836b-htv_firmware | v ≤ 0113b | — |
| vivotek fd836b-hvf2_firmware | v ≤ 0113b | — |
| vivotek ib836b-ehf3_firmware | v ≤ 0113b | — |
| vivotek ib836b-eht_firmware | v ≤ 0113b | — |
| vivotek ib836b-hf3_firmware | v ≤ 0113b | — |
| vivotek ib836b-hrf3_firmware | v ≤ 0113b | — |
| vivotek ib836b-ht_firmware | v ≤ 0113b | — |
| vivotek fd816ca-hf2_firmware | v ≤ 0113b | — |
| vivotek fd816c-hf2_firmware | v ≤ 0213b | — |
| vivotek fd8182-f1_firmware | v ≤ 0113b | — |
| vivotek fd8182-f2_firmware | v ≤ 0113b | — |
| vivotek fd8182-t_firmware | v ≤ 0113b | — |
| vivotek fd8382-etv_firmware | v ≤ 0113b | — |
| vivotek fd8382-evf2_firmware | v ≤ 0113b | — |
| vivotek fd8382-tv_firmware | v ≤ 0113b | — |
| vivotek fd8382-vf2_firmware | v ≤ 0113b | — |
| vivotek ib8382-ef3_firmware | v ≤ 0113b | — |
| vivotek ib8382-et_firmware | v ≤ 0113b | — |
| vivotek ib8382-f3_firmware | v ≤ 0213b | — |
| vivotek ib8382-t_firmware | v ≤ 0113b | — |
| vivotek fd8366-v_firmware | v ≤ 0113b | — |
| vivotek ib8367a_firmware | v ≤ 0213b | — |
| vivotek ib8369a_firmware | v ≤ 0213b | — |
| vivotek ip8166_firmware | v ≤ 0213b | — |
| vivotek md8563-deh_firmware | v ≤ 0113b | — |
| vivotek md8563-eh_firmware | v ≤ 0113b | — |
| vivotek md8564-eh_firmware | v ≤ 0113b | — |
| vivotek md8565-n_firmware | v ≤ 0113b | — |
| vivotek vc8101_firmware | v ≤ 0113b | — |
| vivotek vs8100-v2_firmware | v ≤ 0113b | — |
| vivotek ip8160_firmware | v ≤ 0113a | — |
| vivotek ip8160-w_firmware | v ≤ 0113a | — |
| vivotek ib8360_firmware | v ≤ 0113a | — |
| vivotek ib8360-w_firmware | v ≤ 0113a | — |
| vivotek ip9171-hp_firmware | v ≤ 0113b | — |
| vivotek ip9181-h_firmware | v ≤ 0113b | — |
| vivotek fd9371-ehtv_firmware | v ≤ 0113b | — |
| vivotek fd9381-ehtv_firmware | v ≤ 0113b | — |
| vivotek ib9371-eht_firmware | v ≤ 0113b | — |
| vivotek ib9381-eht_firmware | v ≤ 0113b | — |
| vivotek fd9171-ht_firmware | v ≤ 0113b | — |
| vivotek fd9181-ht_firmware | v ≤ 0113b | — |
| vivotek fe9181-h_firmware | v ≤ 0113b | — |
| vivotek fe9182-h_firmware | v ≤ 0113b | — |
| vivotek fe9381-ehv_firmware | v ≤ 0113b | — |
| vivotek fe9382-ehv_firmware | v ≤ 0113b | — |
| vivotek fe9180-h_firmware | v ≤ 0113b | — |
| vivotek fe9582-ehnv_firmware | v ≤ 0113b | — |
| vivotek sd9161-h_firmware | v ≤ 0114a | — |
| vivotek sd9361-ehl_firmware | v ≤ 0114a | — |
| vivotek sd9362-ehl_firmware | v ≤ 0114a | — |
| vivotek sd9362-eh_firmware | v ≤ 0114a | — |
| vivotek sd9363-ehl_firmware | v ≤ 0114a | — |
| vivotek sd9364-eh_firmware | v ≤ 0114a | — |
| vivotek sd9364-ehl_firmware | v ≤ 0114a | — |
| vivotek sd9363-ehl-v2_firmware | v ≤ 0114a | — |
| vivotek sd9364-ehl-v2_firmware | v ≤ 0114a | — |
| vivotek sd9362-eh-v2_firmware | v ≤ 0104j | — |
| vivotek sd9364-eh-v2_firmware | v ≤ 0104j | — |
| vivotek sd9366-eh-v2_firmware | v ≤ 0104j | — |
| vivotek sd9366-ehl_firmware | v ≤ 0114a | — |
| vivotek sd9366-eh_firmware | v ≤ 0114a | — |
| vivotek sd9365-ehl_firmware | v ≤ 0114a | — |
| vivotek iz9361-eh_firmware | v ≤ 0114a | — |
| vivotek fd9187-h_firmware | v ≤ 0121d | — |
| vivotek fd9187-ht_firmware | v ≤ 0121d | — |
| vivotek fd9387-ehtv_firmware | v ≤ 0121d | — |
| vivotek fd9387-ehv_firmware | v ≤ 0121d | — |
| vivotek fd9387-htv_firmware | v ≤ 0121d | — |
| vivotek fd9387-hv_firmware | v ≤ 0121d | — |
| vivotek ib9387-eh_firmware | v ≤ 0121d | — |
| vivotek ib9387-eht_firmware | v ≤ 0121d | — |
| vivotek ib9387-h_firmware | v ≤ 0121d | — |
| vivotek ib9387-ht_firmware | v ≤ 0121d | — |
| vivotek fd9189-h_firmware | v ≤ 0121d | — |
| vivotek fd9189-hm_firmware | v ≤ 0121d | — |
| vivotek fd9189-ht_firmware | v ≤ 0121d | — |
| vivotek fd9389-hv_firmware | v ≤ 0121d | — |
| vivotek fd9389-hmv_firmware | v ≤ 0121d | — |
| vivotek fd9389-htv_firmware | v ≤ 0121d | — |
| vivotek fd9389-ehmv_firmware | v ≤ 0121d | — |
| vivotek fd9389-ehtv_firmware | v ≤ 0121d | — |
| vivotek fd9389-ehv_firmware | v ≤ 0121d | — |
| vivotek ib9389-eh_firmware | v ≤ 0121d | — |
| vivotek ib9389-ehm_firmware | v ≤ 0121d | — |
| vivotek ib9389-eht_firmware | v ≤ 0121d | — |
| vivotek ib9389-h_firmware | v ≤ 0121d | — |
| vivotek ib9389-hm_firmware | v ≤ 0121d | — |
| vivotek ib9389-ht_firmware | v ≤ 0121d | — |
| vivotek fd9165-ht_firmware | v ≤ 0121d | — |
| vivotek fd9365-ehtv_firmware | v ≤ 0121d | — |
| vivotek fd9365-htv_firmware | v ≤ 0121d | — |
| vivotek fd9365-htvl_firmware | v ≤ 0121d | — |
| vivotek ib9365-ht_firmware | v ≤ 0121d | — |
| vivotek ib9365-eht_firmware | v ≤ 0121d | — |
| vivotek ip9165-hp_firmware | v ≤ 0121d | — |
| vivotek ip9165-ht_firmware | v ≤ 0121d | — |
| vivotek ip9165-lpc_firmware | v ≤ 0121d | — |
| vivotek fd9391-ehtv_firmware | v ≤ 0121d | — |
| vivotek fe9191_firmware | v ≤ 0124c | — |
| vivotek ip9191-hp_firmware | v ≤ 0121d | — |
| vivotek ip9191-ht_firmware | v ≤ 0121d | — |
| vivotek fe9391-ev_firmware | v ≤ 0124c | — |
| vivotek ib9391-eht_firmware | v ≤ 0121d | — |
| vivotek ip9172-lpc\(freeway\)_firmware | v ≤ 0121d | — |
| vivotek it9389-h_firmware | v ≤ 0121d | — |
| vivotek it9389-ht_firmware | v ≤ 0121d | — |
| vivotek md9561-h_firmware | v ≤ 0121d | — |
| vivotek md9581-h_firmware | v ≤ 0121d | — |
| vivotek ms9390-hv_firmware | v ≤ 0121d | — |
| vivotek tb9330-e_firmware | v ≤ 0121d | — |
| vivotek tb9331-e_firmware | v ≤ 0121d | — |
| vivotek sd9374-ehl_firmware | v ≤ 0123b | — |
| vivotek fd9167-h_firmware | v ≤ 0113b | — |
| vivotek fd9167-ht_firmware | v ≤ 0113b | — |
| vivotek fd9367-ehtv_firmware | v ≤ 0113b | — |
| vivotek fd9367-htv_firmware | v ≤ 0113b | — |
| vivotek fd9367-hv_firmware | v ≤ 0113b | — |
| vivotek fd9367-htv\(epoc\)_firmware | No range specified | — |
| vivotek ib9367-eh_firmware | v ≤ 0113b | — |
| vivotek ib9367-eht_firmware | v ≤ 0113b | — |
| vivotek ib9367-h_firmware | v ≤ 0113b | — |
| vivotek ib9367-ht_firmware | v ≤ 0113b | — |
| vivotek ip9167-hp_firmware | v ≤ 0113b | — |
| vivotek ip9167-ht_firmware | v ≤ 0113b | — |
| vivotek ma9321-ehtv_firmware | v ≤ 0113a | — |
| vivotek ms9321-ehv_firmware | v ≤ 0100i | — |
| vivotek ma9322-ehtv_firmware | v ≤ 0114c | — |
| vivotek fd8177-h_firmware | v ≤ 0113b | — |
| vivotek fd8377-hv_firmware | v ≤ 0113b | — |
| vivotek fd8177-ht_firmware | v ≤ 0113b | — |
| vivotek fd8377-ehtv_firmware | v ≤ 0113b | — |
| vivotek fd8377-htv_firmware | v ≤ 0113b | — |
| vivotek fd8179-h_firmware | v ≤ 0113b | — |
| vivotek fd8379-hv_firmware | v ≤ 0113b | — |
| vivotek ib8377-h_firmware | v ≤ 0113b | — |
| vivotek ib8377-ht_firmware | v ≤ 0113b | — |
| vivotek ib8377-eht_firmware | v ≤ 0113b | — |
| vivotek fd9165-ht-a_firmware | v ≤ 0100m | — |
| vivotek fd9365-htv-a_firmware | v ≤ 0100m | — |
| vivotek fd9365-ehtv-a_firmware | v ≤ 0100m | — |
| vivotek fd9187-ht-a_firmware | v ≤ 0100m | — |
| vivotek fd9387-htv-a_firmware | v ≤ 0100m | — |
| vivotek fd9387-ehtv-a_firmware | v ≤ 0100m | — |
| vivotek ib9365-eht-a_firmware | v ≤ 0100m | — |
| vivotek ib9365-ht-a_firmware | v ≤ 0100m | — |
| vivotek ib9387-eht-a_firmware | v ≤ 0100m | — |
| vivotek ib9387-ht-a_firmware | v ≤ 0100m | — |
| vivotek ip9164-ht_firmware | v ≤ 0100m | — |
| vivotek ip9164-lpc_firmware | v ≤ 0100m | — |
| vivotek ip9165-lpc\(i-cs_kit\)_firmware | v ≤ 0113d | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.