testserver.cgi of the web service on VIVOTEK Network... · CVE-2020-11949 · GitHub Advisory Database · GitHub

testserver.cgi of the web service on VIVOTEK Network...

Low severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 29, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices.

References

Published by the National Vulnerability Database

May 28, 2020

Published to the GitHub Advisory Database May 24, 2022

Last updated Jan 29, 2023