Design/Logic Flaw

2024-02-2920:15:00

PRIOn knowledge base

www.prio-n.com

vivotek

network camera

design flaw

logic flaw

remote code execution

security vulnerability

nvd

7.8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the upload_file.cgi component.

References

github.com/cwh031600/vivotek/blob/main/vivotek-FD8166A-uploadfile-dos/vivotek-FD8166A-uploadfile-analysis.md