{"id":"CVE-2020-11950","aliases":["EUVD-2020-4287","GHSA-gx55-wpp6-x8cf"],"status":"published","title":"VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2)...","description":"VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution of OS commands). For example, this affects IT9388-HT devices.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02685,"percentile":0.85965,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2020-05-28T12:44:36Z","modified":"2026-06-17T02:51:07Z","products":[{"vendor":"vivotek","product":"cc8160\\(hs\\)_firmware"},{"vendor":"vivotek","product":"cc8160_firmware"},{"vendor":"vivotek","product":"cc8370-hv_firmware"},{"vendor":"vivotek","product":"cc8371-hv_firmware"},{"vendor":"vivotek","product":"cc9381-hv_firmware"},{"vendor":"vivotek","product":"cd8371-hntv_firmware"},{"vendor":"vivotek","product":"cd8371-hnvf2_firmware"},{"vendor":"vivotek","product":"fd8166a-n_firmware"},{"vendor":"vivotek","product":"fd8166a_firmware"},{"vendor":"vivotek","product":"fd8167a-s_firmware"},{"vendor":"vivotek","product":"fd8167a_firmware"},{"vendor":"vivotek","product":"fd8169a-s_firmware"},{"vendor":"vivotek","product":"fd8169a_firmware"},{"vendor":"vivotek","product":"fd816b-hf2_firmware"},{"vendor":"vivotek","product":"fd816b-ht_firmware"},{"vendor":"vivotek","product":"fd816ba-hf2_firmware"},{"vendor":"vivotek","product":"fd816ba-ht_firmware"},{"vendor":"vivotek","product":"fd816c-hf2_firmware"},{"vendor":"vivotek","product":"fd816ca-hf2_firmware"},{"vendor":"vivotek","product":"fd8177-h_firmware"},{"vendor":"vivotek","product":"fd8177-ht_firmware"},{"vendor":"vivotek","product":"fd8179-h_firmware"},{"vendor":"vivotek","product":"fd8182-f1_firmware"},{"vendor":"vivotek","product":"fd8182-f2_firmware"},{"vendor":"vivotek","product":"fd8182-t_firmware"},{"vendor":"vivotek","product":"fd8366-v_firmware"},{"vendor":"vivotek","product":"fd8367a-v_firmware"},{"vendor":"vivotek","product":"fd8369a-v_firmware"},{"vendor":"vivotek","product":"fd836b-ehtv_firmware"},{"vendor":"vivotek","product":"fd836b-ehvf2_firmware"},{"vendor":"vivotek","product":"fd836b-htv_firmware"},{"vendor":"vivotek","product":"fd836b-hvf2_firmware"},{"vendor":"vivotek","product":"fd836ba-ehtv_firmware"},{"vendor":"vivotek","product":"fd836ba-ehvf2_firmware"},{"vendor":"vivotek","product":"fd836ba-htv_firmware"},{"vendor":"vivotek","product":"fd836ba-hvf2_firmware"},{"vendor":"vivotek","product":"fd8377-ehtv_firmware"},{"vendor":"vivotek","product":"fd8377-htv_firmware"},{"vendor":"vivotek","product":"fd8377-hv_firmware"},{"vendor":"vivotek","product":"fd8379-hv_firmware"},{"vendor":"vivotek","product":"fd8382-etv_firmware"},{"vendor":"vivotek","product":"fd8382-evf2_firmware"},{"vendor":"vivotek","product":"fd8382-tv_firmware"},{"vendor":"vivotek","product":"fd8382-vf2_firmware"},{"vendor":"vivotek","product":"fd9165-ht-a_firmware"},{"vendor":"vivotek","product":"fd9165-ht_firmware"},{"vendor":"vivotek","product":"fd9166-hn_firmware"},{"vendor":"vivotek","product":"fd9167-h_firmware"},{"vendor":"vivotek","product":"fd9167-ht_firmware"},{"vendor":"vivotek","product":"fd9171-ht_firmware"},{"vendor":"vivotek","product":"fd9181-ht_firmware"},{"vendor":"vivotek","product":"fd9187-h_firmware"},{"vendor":"vivotek","product":"fd9187-ht-a_firmware"},{"vendor":"vivotek","product":"fd9187-ht_firmware"},{"vendor":"vivotek","product":"fd9189-h_firmware"},{"vendor":"vivotek","product":"fd9189-hm_firmware"},{"vendor":"vivotek","product":"fd9189-ht_firmware"},{"vendor":"vivotek","product":"fd9360-h_firmware"},{"vendor":"vivotek","product":"fd9365-ehtv-a_firmware"},{"vendor":"vivotek","product":"fd9365-ehtv_firmware"},{"vendor":"vivotek","product":"fd9365-htv-a_firmware"},{"vendor":"vivotek","product":"fd9365-htv_firmware"},{"vendor":"vivotek","product":"fd9365-htvl_firmware"},{"vendor":"vivotek","product":"fd9366-hv_firmware"},{"vendor":"vivotek","product":"fd9367-ehtv_firmware"},{"vendor":"vivotek","product":"fd9367-htv\\(epoc\\)_firmware"},{"vendor":"vivotek","product":"fd9367-htv_firmware"},{"vendor":"vivotek","product":"fd9367-hv_firmware"},{"vendor":"vivotek","product":"fd9368-htv_firmware"},{"vendor":"vivotek","product":"fd9371-\\(e\\)htv_firmware"},{"vendor":"vivotek","product":"fd9380-h_firmware"},{"vendor":"vivotek","product":"fd9381-\\(e\\)htv_firmware"},{"vendor":"vivotek","product":"fd9387-ehtv-a_firmware"},{"vendor":"vivotek","product":"fd9387-ehtv_firmware"},{"vendor":"vivotek","product":"fd9387-ehv_firmware"},{"vendor":"vivotek","product":"fd9387-htv-a_firmware"},{"vendor":"vivotek","product":"fd9387-htv_firmware"},{"vendor":"vivotek","product":"fd9387-hv_firmware"},{"vendor":"vivotek","product":"fd9388-htv_firmware"},{"vendor":"vivotek","product":"fd9389-ehmv_firmware"},{"vendor":"vivotek","product":"fd9389-ehtv_firmware"},{"vendor":"vivotek","product":"fd9389-ehv_firmware"},{"vendor":"vivotek","product":"fd9389-hmv_firmware"},{"vendor":"vivotek","product":"fd9389-htv_firmware"},{"vendor":"vivotek","product":"fd9389-hv_firmware"},{"vendor":"vivotek","product":"fd9391-ehtv_firmware"},{"vendor":"vivotek","product":"fe8182_firmware"},{"vendor":"vivotek","product":"fe9180-h_firmware"},{"vendor":"vivotek","product":"fe9181-h_firmware"},{"vendor":"vivotek","product":"fe9182-h_firmware"},{"vendor":"vivotek","product":"fe9191_firmware"},{"vendor":"vivotek","product":"fe9380-hv_firmware"},{"vendor":"vivotek","product":"fe9381-ehv_firmware"},{"vendor":"vivotek","product":"fe9382-ehv_firmware"},{"vendor":"vivotek","product":"fe9391-ev_firmware"},{"vendor":"vivotek","product":"fe9582-ehnv_firmware"},{"vendor":"vivotek","product":"ib8360-w_firmware"},{"vendor":"vivotek","product":"ib8360_firmware"},{"vendor":"vivotek","product":"ib8367a_firmware"},{"vendor":"vivotek","product":"ib8369a_firmware"},{"vendor":"vivotek","product":"ib836b-ehf3_firmware"},{"vendor":"vivotek","product":"ib836b-eht_firmware"},{"vendor":"vivotek","product":"ib836b-hf3_firmware"},{"vendor":"vivotek","product":"ib836b-hrf3_firmware"},{"vendor":"vivotek","product":"ib836b-ht_firmware"},{"vendor":"vivotek","product":"ib836ba-ehf3_firmware"},{"vendor":"vivotek","product":"ib836ba-eht_firmware"},{"vendor":"vivotek","product":"ib836ba-hf3_firmware"},{"vendor":"vivotek","product":"ib836ba-ht_firmware"},{"vendor":"vivotek","product":"ib8377-eht_firmware"},{"vendor":"vivotek","product":"ib8377-h_firmware"},{"vendor":"vivotek","product":"ib8377-ht_firmware"},{"vendor":"vivotek","product":"ib8379-h_firmware"},{"vendor":"vivotek","product":"ib8382-ef3_firmware"},{"vendor":"vivotek","product":"ib8382-et_firmware"},{"vendor":"vivotek","product":"ib8382-f3_firmware"},{"vendor":"vivotek","product":"ib8382-rf3_firmware"},{"vendor":"vivotek","product":"ib8382-rt_firmware"},{"vendor":"vivotek","product":"ib8382-t_firmware"},{"vendor":"vivotek","product":"ib9360-h_firmware"},{"vendor":"vivotek","product":"ib9365-eht-a_firmware"},{"vendor":"vivotek","product":"ib9365-eht_firmware"},{"vendor":"vivotek","product":"ib9365-ht-a_firmware"},{"vendor":"vivotek","product":"ib9365-ht_firmware"},{"vendor":"vivotek","product":"ib9367-eh_firmware"},{"vendor":"vivotek","product":"ib9367-eht_firmware"},{"vendor":"vivotek","product":"ib9367-h_firmware"},{"vendor":"vivotek","product":"ib9367-ht_firmware"},{"vendor":"vivotek","product":"ib9368-ht_firmware"},{"vendor":"vivotek","product":"ib9371-\\(e\\)ht_firmware"},{"vendor":"vivotek","product":"ib9380-h_firmware"},{"vendor":"vivotek","product":"ib9381-\\(e\\)ht_firmware"},{"vendor":"vivotek","product":"ib9387-eh_firmware"},{"vendor":"vivotek","product":"ib9387-eht-a_firmware"},{"vendor":"vivotek","product":"ib9387-eht_firmware"},{"vendor":"vivotek","product":"ib9387-h_firmware"},{"vendor":"vivotek","product":"ib9387-ht-a_firmware"},{"vendor":"vivotek","product":"ib9387-ht_firmware"},{"vendor":"vivotek","product":"ib9388-ht_firmware"},{"vendor":"vivotek","product":"ib9389-eh_firmware"},{"vendor":"vivotek","product":"ib9389-ehm_firmware"},{"vendor":"vivotek","product":"ib9389-eht_firmware"},{"vendor":"vivotek","product":"ib9389-h_firmware"},{"vendor":"vivotek","product":"ib9389-hm_firmware"},{"vendor":"vivotek","product":"ib9389-ht_firmware"},{"vendor":"vivotek","product":"ib9391-eht_firmware"},{"vendor":"vivotek","product":"ip8160-w_firmware"},{"vendor":"vivotek","product":"ip8160_firmware"},{"vendor":"vivotek","product":"ip8166_firmware"},{"vendor":"vivotek","product":"ip9164-ht_firmware"},{"vendor":"vivotek","product":"ip9164-lpc_firmware"},{"vendor":"vivotek","product":"ip9165-hp_firmware"},{"vendor":"vivotek","product":"ip9165-ht_firmware"},{"vendor":"vivotek","product":"ip9165-lpc\\(i-cs_kit\\)_firmware"},{"vendor":"vivotek","product":"ip9165-lpc_firmware"},{"vendor":"vivotek","product":"ip9167-hp_firmware"},{"vendor":"vivotek","product":"ip9167-ht_firmware"},{"vendor":"vivotek","product":"ip9171-hp_firmware"},{"vendor":"vivotek","product":"ip9172-lpc_firmware"},{"vendor":"vivotek","product":"ip9181-h_firmware"},{"vendor":"vivotek","product":"ip9191-hp_firmware"},{"vendor":"vivotek","product":"ip9191-ht_firmware"},{"vendor":"vivotek","product":"it9360-h_firmware"},{"vendor":"vivotek","product":"it9380-h_firmware"},{"vendor":"vivotek","product":"it9388-ht_firmware"},{"vendor":"vivotek","product":"it9389-h_firmware"},{"vendor":"vivotek","product":"it9389-ht_firmware"},{"vendor":"vivotek","product":"iz9361-eh_firmware"},{"vendor":"vivotek","product":"ma9321-ehtv_firmware"},{"vendor":"vivotek","product":"ma9322-ehtv_firmware"},{"vendor":"vivotek","product":"md8563-deh_firmware"},{"vendor":"vivotek","product":"md8563-eh_firmware"},{"vendor":"vivotek","product":"md8564-eh_firmware"},{"vendor":"vivotek","product":"md8565-n_firmware"},{"vendor":"vivotek","product":"md9560-dh_firmware"},{"vendor":"vivotek","product":"md9560-h_firmware"},{"vendor":"vivotek","product":"md9561-h_firmware"},{"vendor":"vivotek","product":"md9581-h_firmware"},{"vendor":"vivotek","product":"ms9321-ehv_firmware"},{"vendor":"vivotek","product":"ms9390-hv_firmware"},{"vendor":"vivotek","product":"sd9161-h_firmware"},{"vendor":"vivotek","product":"sd9361-ehl_firmware"},{"vendor":"vivotek","product":"sd9362-eh-v2_firmware"},{"vendor":"vivotek","product":"sd9362-eh_firmware"},{"vendor":"vivotek","product":"sd9362-ehl_firmware"},{"vendor":"vivotek","product":"sd9363-ehl-v2_firmware"},{"vendor":"vivotek","product":"sd9363-ehl_firmware"},{"vendor":"vivotek","product":"sd9364-eh-v2_firmware"},{"vendor":"vivotek","product":"sd9364-eh_firmware"},{"vendor":"vivotek","product":"sd9364-ehl-v2_firmware"},{"vendor":"vivotek","product":"sd9364-ehl_firmware"},{"vendor":"vivotek","product":"sd9365-ehl_firmware"},{"vendor":"vivotek","product":"sd9366-eh-v2_firmware"},{"vendor":"vivotek","product":"sd9366-eh_firmware"},{"vendor":"vivotek","product":"sd9366-ehl_firmware"},{"vendor":"vivotek","product":"sd9374-ehl\\(x\\)_firmware"},{"vendor":"vivotek","product":"tb9330-e_firmware"},{"vendor":"vivotek","product":"tb9331-e_firmware"},{"vendor":"vivotek","product":"vc8101_firmware"},{"vendor":"vivotek","product":"vs8100-v2_firmware"}],"references":[{"url":"http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2020-001-v1.pdf","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11950"},{"url":"https://github.com/advisories/GHSA-gx55-wpp6-x8cf"}],"sources":{"cve":[{"id":"CVE-2020-11950","description":"VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution of OS commands). For example, this affects IT9388-HT devices.","status":"published","published":"2020-05-28T12:44:36Z","modified":"2024-08-04T11:42:00.764Z","updated_at":"2026-11-02T14:35:57.352161Z"}],"euvd":[{"id":"EUVD-2020-4287","description":"VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution of OS commands). For example, this affects IT9388-HT devices.","status":"published","published":"2020-05-28T12:44:36Z","modified":"2024-08-04T11:42:00Z","updated_at":"2026-11-03T03:07:41.956166Z"}],"ghsa":[{"id":"GHSA-gx55-wpp6-x8cf","title":"VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2)...","description":"VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution of OS commands). For example, this affects IT9388-HT devices.","status":"published","published":"2022-05-24T17:18:47Z","modified":"2023-01-29T05:02:38Z","updated_at":"2026-11-02T14:45:08.066233Z"}],"nvd":[{"id":"CVE-2020-11950","description":"VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution of OS commands). For example, this affects IT9388-HT devices.","status":"published","published":"2020-05-28T13:15:11.38Z","modified":"2026-06-17T02:51:07.17Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:06:04.922138Z"}]}}