Security Advisory

CVE-2017-9829

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-06-23 22:00:00

Last updated 2024-09-17 01:26:29

Assigner mitre

State PUBLISHED

Description

/cgi-bin/admin/downloadMedias.cgi of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers to read any file on the cameras Linux filesystem via a crafted HTTP request containing ".." sequences. This vulnerability is already verified on VIVOTEK Network Camera IB8369/FD8164/FD816BA; most others have similar firmware that may be affected.

← Browse all CVEs View on cve.org ↗