Back to Database
Status published
Medium
CVE-2020-11949
testserver.cgi of the web service on VIVOTEK Network Cameras before...
Vulnerability Description
testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-11949
Credits & Attribution
No credits recorded in the NVD database.
More from vivotek
View All →CVE-2020-11950
VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an...
High
8.8
CVE-2019-14458
VIVOTEK IP Camera devices with firmware before 0x20x allow a...
High
7.5
CVE-2019-14457
VIVOTEK IP Camera devices with firmware before 0x20x have a...
Critical
9.8
CVE-2019-10256
An authentication bypass vulnerability in VIVOTEK IPCam versions prior to...
Critical
9.8
CVE-2018-18244
Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products...
Medium
6.1
Affected Vendor
vivotek
View all reports →Affected Software
cc9381-hv firmware, fd9360-h firmware, fd9368-htv firmware, fd9380-h firmware, fd9388-htv firmware, ib9360-h firmware, ib9368-ht firmware, ib9380-h firmware, ib9388-ht firmware, it9360-h firmware, it9380-h firmware, it9388-ht firmware, md9560-dh firmware, md9560-h firmware, fd9366-hv firmware, fd9166-hn firmware, fe9380-hv firmware, cc8160 firmware, cc8160\(hs\) firmware, cc8370-hv firmware, cc8371-hv firmware, cd8371-hntv firmware, cd8371-hnvf2 firmware, fd8166a firmware, fd8166a-n firmware, fd8167a firmware, fd8169a firmware, fd8367a-v firmware, fd8369a-v firmware, fd816ba-hf2 firmware, fd836ba-hvf2 firmware, fd836ba-htv firmware, fd836ba-ehvf2 firmware, fd816ba-ht firmware, fd836ba-ehtv firmware, ib836ba-ehf3 firmware, ib836ba-eht firmware, ib836ba-hf3 firmware, ib836ba-ht firmware, fd816b-hf2 firmware, fd816b-ht firmware, fd836b-ehtv firmware, fd836b-ehvf2 firmware, fd836b-htv firmware, fd836b-hvf2 firmware, ib836b-ehf3 firmware, ib836b-eht firmware, ib836b-hf3 firmware, ib836b-hrf3 firmware, ib836b-ht firmware, fd816ca-hf2 firmware, fd816c-hf2 firmware, fd8182-f1 firmware, fd8182-f2 firmware, fd8182-t firmware, fd8382-etv firmware, fd8382-evf2 firmware, fd8382-tv firmware, fd8382-vf2 firmware, ib8382-ef3 firmware, ib8382-et firmware, ib8382-f3 firmware, ib8382-t firmware, fd8366-v firmware, ib8367a firmware, ib8369a firmware, ip8166 firmware, md8563-deh firmware, md8563-eh firmware, md8564-eh firmware, md8565-n firmware, vc8101 firmware, vs8100-v2 firmware, ip8160 firmware, ip8160-w firmware, ib8360 firmware, ib8360-w firmware, ip9171-hp firmware, ip9181-h firmware, fd9371-ehtv firmware, fd9381-ehtv firmware, ib9371-eht firmware, ib9381-eht firmware, fd9171-ht firmware, fd9181-ht firmware, fe9181-h firmware, fe9182-h firmware, fe9381-ehv firmware, fe9382-ehv firmware, fe9180-h firmware, fe9582-ehnv firmware, sd9161-h firmware, sd9361-ehl firmware, sd9362-ehl firmware, sd9362-eh firmware, sd9363-ehl firmware, sd9364-eh firmware, sd9364-ehl firmware, sd9363-ehl-v2 firmware, sd9364-ehl-v2 firmware, sd9362-eh-v2 firmware, sd9364-eh-v2 firmware, sd9366-eh-v2 firmware, sd9366-ehl firmware, sd9366-eh firmware, sd9365-ehl firmware, iz9361-eh firmware, fd9187-h firmware, fd9187-ht firmware, fd9387-ehtv firmware, fd9387-ehv firmware, fd9387-htv firmware, fd9387-hv firmware, ib9387-eh firmware, ib9387-eht firmware, ib9387-h firmware, ib9387-ht firmware, fd9189-h firmware, fd9189-hm firmware, fd9189-ht firmware, fd9389-hv firmware, fd9389-hmv firmware, fd9389-htv firmware, fd9389-ehmv firmware, fd9389-ehtv firmware, fd9389-ehv firmware, ib9389-eh firmware, ib9389-ehm firmware, ib9389-eht firmware, ib9389-h firmware, ib9389-hm firmware, ib9389-ht firmware, fd9165-ht firmware, fd9365-ehtv firmware, fd9365-htv firmware, fd9365-htvl firmware, ib9365-ht firmware, ib9365-eht firmware, ip9165-hp firmware, ip9165-ht firmware, ip9165-lpc firmware, fd9391-ehtv firmware, fe9191 firmware, ip9191-hp firmware, ip9191-ht firmware, fe9391-ev firmware, ib9391-eht firmware, ip9172-lpc\(freeway\) firmware, it9389-h firmware, it9389-ht firmware, md9561-h firmware, md9581-h firmware, ms9390-hv firmware, tb9330-e firmware, tb9331-e firmware, sd9374-ehl firmware, fd9167-h firmware, fd9167-ht firmware, fd9367-ehtv firmware, fd9367-htv firmware, fd9367-hv firmware, fd9367-htv\(epoc\) firmware, ib9367-eh firmware, ib9367-eht firmware, ib9367-h firmware, ib9367-ht firmware, ip9167-hp firmware, ip9167-ht firmware, ma9321-ehtv firmware, ms9321-ehv firmware, ma9322-ehtv firmware, fd8177-h firmware, fd8377-hv firmware, fd8177-ht firmware, fd8377-ehtv firmware, fd8377-htv firmware, fd8179-h firmware, fd8379-hv firmware, ib8377-h firmware, ib8377-ht firmware, ib8377-eht firmware, fd9165-ht-a firmware, fd9365-htv-a firmware, fd9365-ehtv-a firmware, fd9187-ht-a firmware, fd9387-htv-a firmware, fd9387-ehtv-a firmware, ib9365-eht-a firmware, ib9365-ht-a firmware, ib9387-eht-a firmware, ib9387-ht-a firmware, ip9164-ht firmware, ip9164-lpc firmware, ip9165-lpc\(i-cs kit\) firmware
Vulnerable Versions:
0
Timeline
Official Publish:
May 28th, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.