Skip to content

Vivotek vulnerabilities

Products

Show 159 moreShow less

Newest

vivotek fd8136 firmware A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136... CVE-2026-35718 6.5 MediumJune 2, 2026
vivotek fd8136 firmware A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136... CVE-2026-35717 6.3 MediumJune 2, 2026
vivotek fd8136 firmware A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136... CVE-2026-35716 6.3 MediumJune 2, 2026
vivotek fd8136 firmware A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the... CVE-2026-30652 8.8 HighJune 2, 2026
vivotek fd8136 firmware A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask... CVE-2026-30650 8.8 HighJune 2, 2026
vivotek fd8136 firmware Buffer Overflow vulnerability in VIVOTEK INC FD8136-VVTK-0300a allows a remote attacker to... CVE-2026-30649 7.3 HighJune 2, 2026
vivotek affected device model numbers are fd8365, fd8365v2, fd9165, fd9171, fd9187, fd9189, fd9365, fd9371, fd9381, fd9387, fd9389, fd9391,fe9180,fe9181, fe9191, fe9381, fe9382, fe9391, fe9582, ib9365, ib93587lpr, ib9371,ib9381, ib9387, ib9389, ib939,ip9165,ip9171, ip9172, ip9181, ip9191, it9389, ma9321, ma9322, ms9321, ms9390, tb9330 Legacy Vivotek Camera Firmware Command Injection in upload_map.cgi CVE-2026-22755 EPSS 13.8% 9.3 CriticalJanuary 13, 2026
vivotek ip7137, ip7137 firmware +1 more Command injection in Vivotek IP7137 cameras CVE-2025-66052 8.6 HighJanuary 9, 2026
vivotek ip7137, ip7137 firmware +1 more Path traversal in Vivotek IP7137 cameras CVE-2025-66051 6.9 MediumJanuary 9, 2026
vivotek ip7137, ip7137 firmware +1 more No password set for administrative account in Vivotek IP7137 cameras CVE-2025-66050 9.3 CriticalJanuary 9, 2026
vivotek ip7137, ip7137 firmware +1 more Unprotected RTSP stream in Vivotek IP7137 cameras CVE-2025-66049 8.7 HighJanuary 9, 2026
vivotek affected device model numbers are fd7131-vvtk,fd7131-vvtk,fd7131-vvtk,fd7141-vvtk,ip7131-vvtk,ip7133-vvtk,ip7133-vvtk,ip7133-vvtk,ip7134-vvtk,ip7135-vvtk,ip7135-vvtk,ip7135-vvtk,ip7135-vvtk,ip7137-vvtk,ip7137-vvtk,ip7137-vvtk,ip7137-vvtk,ip7137-vvtk,ip7137-vvtk,ip7138-vvtk,ip7142-vvtk,ip7142-vvtk,ip7151-vvtk,ip7152-vvtk,ip7153-vvtk,ip7153-vvtk,ip7154-vvtk,ip7330-vvtk,ip7330-vvtk,ip7330-vvtk,ip8131-vvtk,ip8131-vvtk,ip8131-vvtk,ip8131w-vvtk,pt7135-vvtk,pt7137-tcon,pt7137-vvtk,pt7137-vvtk,pt7137-vvtk,pt7137-vvtk,pz7131-vvtk,pz7131-vvtk,pz71x1-vvtk,pz71x1-vvtk,pz71x2-vvtk,sd73x3-vvtk,sd73x3-vvtk,sd73x3-vvtk,tc5330-vvtk,tc5332-tcvv,tc5333-tcvv,tc5633-tcvv,tc5633-vvtk,vs7100-vvtk,vs7100-vvtk,vs7100-vvtk Use of default login credentials in Legacy Vivotek Devices CVE-2025-12592 9.3 CriticalNovember 19, 2025
vivotek nvr nd8422p, nvr nd9525p, nvr nd9541p +2 more Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source CVE-2025-3403 5.1 MediumApril 8, 2025
vivotek ib8367a, ib8367a firmware +1 more Vivotek IB8367A upload_file.cgi getenv command injection CVE-2024-7443 5.3 MediumAugust 3, 2024
vivotek sd9364, sd9364 firmware +1 more Vivotek SD9364 upload_file.cgi getenv command injection CVE-2024-7442 5.3 MediumAugust 3, 2024
vivotek sd9364, sd9364 firmware +1 more Vivotek SD9364 httpd read stack-based overflow CVE-2024-7441 8.7 HighAugust 3, 2024
vivotek cc8160, cc8160 firmware +1 more Vivotek CC8160 upload_file.cgi getenv command injection CVE-2024-7440 5.3 MediumAugust 3, 2024
vivotek cc8160, cc8160 firmware +1 more Vivotek CC8160 httpd read stack-based overflow CVE-2024-7439 8.7 HighAugust 3, 2024
vivotek network camera, camera firmware +1 more An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute... CVE-2024-26548 9.8 CriticalFebruary 29, 2024
vivotek cc8160\(hs\) firmware, cc8160 firmware, cc8370-hv firmware +197 more +199 more VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2)... CVE-2020-11950 8.8 HighMay 28, 2020
vivotek cc8160\(hs\) firmware, cc8160 firmware, cc8370-hv firmware +191 more +193 more testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and... CVE-2020-11949 6.5 MediumMay 28, 2020
vivotek pt7135 firmware A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the... CVE-2013-1598 Public exploit EPSS 20.5% 8.8 HighJanuary 24, 2020
vivotek pt7135 firmware A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a... CVE-2013-1597 Public exploit EPSS 14.2% 6.5 MediumJanuary 24, 2020
vivotek pt7135 firmware An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via... CVE-2013-1596 Public exploit EPSS 10.4% 5.3 MediumJanuary 24, 2020
vivotek pt7135 firmware A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a... CVE-2013-1595 Public exploit EPSS 41.6% 9.8 CriticalJanuary 24, 2020
vivotek pt7135 firmware An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera... CVE-2013-1594 Public exploit 7.5 HighJanuary 24, 2020
vivotek ip7160 firmware, ip7361 firmware, ip8332 firmware +2 more Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream CVE-2013-4985 Public exploit 7.5 HighDecember 27, 2019
vivotek camera VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP... CVE-2019-14458 7.5 HighSeptember 18, 2019
vivotek camera An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found. CVE-2019-10256 9.8 CriticalSeptember 10, 2019
vivotek camera VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a... CVE-2019-14457 9.8 CriticalSeptember 10, 2019
vivotek fd8136 firmware Vivotek FD8136 devices allow remote memory corruption and remote code execution because of a... CVE-2018-14496 Disputed 9.8 CriticalJuly 10, 2019
vivotek fd8136 firmware Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection... CVE-2018-14495 Disputed 9.8 CriticalJuly 10, 2019
vivotek fd8136 firmware Vivotek FD8136 devices allow Remote Command Injection, related to BusyBox and wget. CVE-2018-14494 Disputed 9.8 CriticalJuly 10, 2019
vivotek camera Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x... CVE-2018-18244 6.1 MediumJanuary 3, 2019
vivotek camera Cross-site scripting in event_script.js in VIVOTEK Network Camera Series products with firmware... CVE-2018-18005 6.1 MediumJanuary 3, 2019
vivotek camera Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware... CVE-2018-18004 5.3 MediumJanuary 3, 2019
vivotek camera VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code ... CVE-2018-14771 8.8 HighSeptember 5, 2018
vivotek camera VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code ... CVE-2018-14770 8.8 HighSeptember 5, 2018
vivotek camera VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF. CVE-2018-14769 8.8 HighSeptember 5, 2018
vivotek camera Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before... CVE-2018-14768 8.8 HighAugust 29, 2018
vivotek network camera fd8164 firmware, network camera fd816ba firmware, network camera ib8369 firmware +2 more '/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is... CVE-2017-9829 EPSS 68.7% 7.5 HighJune 23, 2017
vivotek network camera fd8164 firmware, network camera fd816ba firmware, network camera ib8369 firmware +2 more '/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is... CVE-2017-9828 EPSS 82.5% 9.8 CriticalJune 23, 2017
4xem vatctrl class, d-link mpeg4 shm audio control, vivotek rtsp mpeg4 sp control +2 more Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class ... CVE-2008-4771 Public exploit 9.3 HighOctober 28, 2008
vivotek mjpegcontrol Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control (aka MjpegControl) in... CVE-2007-3167 Public exploit 7.6 HighJune 11, 2007