CVE-2018-14495: OS Command Injection

Published Jul 10, 2019

Updated

DISPUTED Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection vulnerability in our target device," a different issue than CVE-2018-14494. NOTE: The vendor has disputed this as a vulnerability and states that the issue does not cause a web server crash or have any other affect on it's performance.

Affected Software

4 affected components

Vivotek FD8136 firmware=0301a

Vivotek FD8136

All of the following

Vivotek FD8136 firmware=0301a

Vivotek FD8136

Event History

Jul 10, 2019

CVE Published

via MITRE·01:20 PM

Data Sourced

via MITRE·01:20 PM

Description

Disputed

02:15 PM

Frequently Asked Questions

What is CVE-2018-14495?

CVE-2018-14495 is a vulnerability that allows remote command injection in Vivotek FD8136 devices.

What is the severity of CVE-2018-14495?

The severity of CVE-2018-14495 is critical with a score of 9.8.

How does CVE-2018-14495 affect Vivotek FD8136 devices?

CVE-2018-14495 allows remote command injection in Vivotek FD8136 devices.

How can I fix CVE-2018-14495?

There is currently no fix available for CVE-2018-14495. Consider applying security patches or updates from the vendor if they become available.

Where can I find more information about CVE-2018-14495?

You can find more information about CVE-2018-14495 at the following references: [link1](https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/) and [link2](https://www.vdalabs.com/2018/08/06/professional-iot-hacking-series-hunting-remote-command-injection/)