CVE-2018-14770 VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service).
HighCVSS 8.8
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vivotek camera | All versions | No fix listed |
References
- download.vivotek.com mitigation vendor-advisory
- www.vivotek.com third-party-advisory