First published: Thu May 28 2020(Updated: )
testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Vivotek CC9381-HV Firmware | <=0222g | |
Vivotek CC9381-HV Firmware | ||
Vivotek FD9360-H Firmware | <=0222g | |
Vivotek FD9360-H Firmware | ||
Vivotek Fd9368-htv | <=0222g | |
Vivotek Fd9368-htv Firmware | ||
Vivotek FD9380-H | <=0222g | |
Vivotek FD9380-H | ||
Vivotek FD9388-HTV | <=0222g | |
Vivotek FD9388-HTV | ||
Vivotek IB9360-H | <=0222g | |
Vivotek IB9360-H Firmware | ||
Vivotek Ib9368-ht Firmware | <=0222g | |
Vivotek IB9368-HT | ||
Vivotek IB9380-H | <=0222g | |
Vivotek IB9380-H | ||
Vivotek IB9388-HT | <=0222g | |
Vivotek IB9388-HT | ||
Vivotek IT9360-H | <=0222g | |
Vivotek IT9360-H Firmware | ||
Vivotek It9380-h Firmware | <=0222g | |
Vivotek It9380-h Firmware | ||
Vivotek It9388-ht Firmware | <=0222g | |
Vivotek It9388-ht Firmware | ||
Vivotek Md9560-h Firmware | <=0222g | |
Vivotek Md9560-dh Firmware | ||
Vivotek MD9560-H | <=0222g | |
Vivotek MD9560-H | ||
Vivotek FD9366-HV Firmware | <=0222g | |
Vivotek FD9366-HV | ||
Vivotek Fd9166-hn Firmware | <=0222g | |
Vivotek Fd9166-hn Firmware | ||
Vivotek FE9380-HV | <=0222k | |
Vivotek Fe9380-hv Firmware | ||
Vivotek CC8160 (HS) | <=0113b | |
Vivotek CC8160 Firmware | ||
Vivotek CC8160 Firmware | <=0113b | |
Vivotek CC8160 (HS) | ||
Vivotek CC8370-HV Firmware | <=0213b | |
Vivotek CC8370-HV Firmware | ||
Vivotek CC8371-HV | <=0113b | |
Vivotek CC8371-HV Firmware | ||
Vivotek CD8371-HNTV | <=0113b | |
Vivotek CD8371-HNTV Firmware | ||
Vivotek Cd8371-hnvf2 Firmware | <=0113b | |
Vivotek Cd8371-hnvf2 Firmware | ||
Vivotek FD8166A | <=0213b | |
Vivotek FD8166A-N Firmware | ||
Vivotek FD8166A-N | <=0113b | |
Vivotek FD8166A-N Firmware | ||
Vivotek FD8167A-S Firmware | <=0213b | |
Vivotek FD8167A-S | ||
Vivotek FD8169A | <=0213b | |
Vivotek FD8169A-S | ||
Vivotek FD8367A-V | <=0213b | |
Vivotek FD8367A-V | ||
Vivotek FD8369A-V | <=0213b | |
Vivotek Fd8369a-v Firmware | ||
Vivotek FD816BA-HF2 | <=0113b | |
Vivotek FD816BA-HF2 | ||
Vivotek Fd836ba-hvf2 Firmware | <=0113b | |
Vivotek FD836BA-HVF2 | ||
Vivotek Fd836ba-htv Firmware | <=0113b | |
Vivotek Fd836ba-htv Firmware | ||
Vivotek FD836B-EHVF2 Firmware | <=0113b | |
Vivotek FD836BA-EHVF2 | ||
Vivotek FD816BA-HT Firmware | <=0113b | |
Vivotek FD816BA-HT Firmware | ||
Vivotek FD836BA-EHTV | <=0113b | |
Vivotek Fd836ba-ehtv Firmware | ||
Vivotek IB836BA-EHF3 | <=0113b | |
Vivotek IB836BA-EHF3 Firmware | ||
Vivotek IB836BA-EHT | <=0113b | |
Vivotek IB836BA-EHT | ||
Vivotek IB836BA-HF3 | <=0113b | |
Vivotek IB836BA-HF3 | ||
Vivotek IB836BA-HT | <=0113b | |
Vivotek IB836BA-HT Firmware | ||
Vivotek FD816B-HF2 Firmware | <=0113b | |
Vivotek FD816B-HF2 Firmware | ||
Vivotek FD816B-HT | <=0113b | |
Vivotek Fd816b-ht Firmware | ||
Vivotek Fd836b-ehtv Firmware | <=0113b | |
Vivotek FD836B-EHTV | ||
Vivotek FD836BA-EHVF2 | <=0113b | |
Vivotek FD836B-EHVF2 Firmware | ||
Vivotek Fd836b-htv Firmware | <=0113b | |
Vivotek FD836B-HTV | ||
Vivotek FD836B-HVF2 | <=0113b | |
Vivotek FD836BA-HVF2 | ||
Vivotek IB836B-EHF3 | <=0113b | |
Vivotek IB836B-EHF3 | ||
Vivotek Ib836b-eht Firmware | <=0113b | |
Vivotek Ib836b-eht Firmware | ||
Vivotek IB836BA-HF3 | <=0113b | |
Vivotek IB836B-HF3 Firmware | ||
Vivotek IB836B-HRF3 | <=0113b | |
Vivotek IB836B-HRF3 Firmware | ||
Vivotek IB836B-HT Firmware | <=0113b | |
Vivotek IB836B-HT Firmware | ||
Vivotek FD816CA-HF2 | <=0113b | |
Vivotek FD816CA-HF2 | ||
Vivotek FD816C-HF2 | <=0213b | |
Vivotek FD816C-HF2 Firmware | ||
Vivotek FD8182-F1 | <=0113b | |
Vivotek FD8182-F1 | ||
Vivotek FD8182-F2 | <=0113b | |
Vivotek Fd8182-f2 Firmware | ||
Vivotek FD8182-T | <=0113b | |
Vivotek FD8182-T Firmware | ||
Vivotek Fd8382-etv | <=0113b | |
Vivotek Fd8382-etv Firmware | ||
Vivotek FD8382-EVF2 | <=0113b | |
Vivotek Fd8382-vf2 Firmware | ||
Vivotek FD8382-TV | <=0113b | |
Vivotek FD8382-TV | ||
Vivotek FD8382-VF2 | <=0113b | |
Vivotek Fd8382-tv Firmware | ||
Vivotek IB8382-F3 Firmware | <=0113b | |
Vivotek IB8382-F3 Firmware | ||
Vivotek IB8382-ET | <=0113b | |
Vivotek IB8382-ET | ||
Vivotek IB8382-F3 | <=0213b | |
Vivotek IB8382-T Firmware | ||
Vivotek IB8382-T | <=0113b | |
Vivotek IB8382-T Firmware | ||
Vivotek FD8366-V | <=0113b | |
Vivotek FD8366-V Firmware | ||
Vivotek IB8367A Firmware | <=0213b | |
Vivotek IB8367A Firmware | ||
Vivotek IB8369A Firmware | <=0213b | |
Vivotek IB8369A Firmware | ||
Vivotek IP8166 Firmware | <=0213b | |
Vivotek IP8166 Firmware | ||
Vivotek MD8563-DEH | <=0113b | |
Vivotek MD8563-DEH Firmware | ||
Vivotek MD8563-EH | <=0113b | |
Vivotek Md8563-eh Firmware | ||
Vivotek Md8563-eh Firmware | <=0113b | |
Vivotek Md8563-eh Firmware | ||
Vivotek MD8565-N | <=0113b | |
Vivotek MD8565-N | ||
Vivotek VC8101 Firmware | <=0113b | |
Vivotek VC8101 Firmware | ||
Vivotek VS8100-v2 | <=0113b | |
Vivotek VS8100-v2 | ||
Vivotek IP8160 Firmware | <=0113a | |
Vivotek IP8160 Firmware | ||
Vivotek IP8160 Firmware | <=0113a | |
Vivotek IP8160 Firmware | ||
Vivotek IB8360-W Firmware | <=0113a | |
Vivotek IB8360-W | ||
Vivotek IB8360-W Firmware | <=0113a | |
Vivotek IB8360-W Firmware | ||
Vivotek IP9171-HP Firmware | <=0113b | |
Vivotek IP9171-HP Firmware | ||
Vivotek IP9181-H Firmware | <=0113b | |
Vivotek IP9181-H Firmware | ||
Vivotek Fd9371-(e)htv Firmware | <=0113b | |
Vivotek Fd9371-ehtv Firmware | ||
Vivotek Fd9381-(e)htv Firmware | <=0113b | |
Vivotek Fd9381-ehtv Firmware | ||
Vivotek IB9371-EHT Firmware | <=0113b | |
Vivotek IB9371-EHT Firmware | ||
Vivotek IB9381-(e)HT Firmware | <=0113b | |
Vivotek IB9381-(e)HT Firmware | ||
Vivotek FD9171-HT | <=0113b | |
Vivotek Fd9171-ht Firmware | ||
Vivotek Fd9181-ht Firmware | <=0113b | |
Vivotek Fd9181-ht Firmware | ||
Vivotek FE9181-H | <=0113b | |
Vivotek Fe9181-h Firmware | ||
Vivotek Fe9182-h Firmware | <=0113b | |
Vivotek Fe9182-h Firmware | ||
Vivotek Fe9381-ehv | <=0113b | |
Vivotek Fe9381-ehv Firmware | ||
Vivotek Fe9382-ehv | <=0113b | |
Vivotek Fe9382-ehv Firmware | ||
Vivotek FE9180-H Firmware | <=0113b | |
Vivotek FE9180-H Firmware | ||
Vivotek Fe9582-ehnv | <=0113b | |
Vivotek Fe9582-ehnv Firmware | ||
Vivotek SD9161-H Firmware | <=0114a | |
Vivotek SD9161-H Firmware | ||
Vivotek SD9361-EHL | <=0114a | |
Vivotek SD9361-EHL | ||
Vivotek SD9362-EHL Firmware | <=0114a | |
Vivotek SD9362-EHL | ||
Vivotek SD9362-EH-V2 | <=0114a | |
Vivotek Sd9362-eh Firmware | ||
Vivotek Sd9363-ehl-v2 Firmware | <=0114a | |
Vivotek Sd9363-ehl-v2 Firmware | ||
Vivotek SD9364-EH | <=0114a | |
Vivotek SD9364-EH | ||
Vivotek SD9364-EHL Firmware | <=0114a | |
Vivotek SD9364-EHL Firmware | ||
Vivotek Sd9363-ehl-v2 Firmware | <=0114a | |
Vivotek SD9363-EHL-V2 | ||
Vivotek SD9364-EHL-V2 Firmware | <=0114a | |
Vivotek SD9364-EHL-V2 | ||
Vivotek SD9362-EH V2 Firmware | <=0104j | |
Vivotek SD9362-EH V2 Firmware | ||
Vivotek Sd9364-eh-v2 | <=0104j | |
Vivotek Sd9364-eh-v2 Firmware | ||
Vivotek SD9366-EH-V2 Firmware | <=0104j | |
Vivotek SD9366-EH-V2 Firmware | ||
Vivotek SD9366-EHL Firmware | <=0114a | |
Vivotek SD9366-EHL Firmware | ||
Vivotek Sd9366-eh Firmware | <=0114a | |
Vivotek SD9366-EH | ||
Vivotek Sd9365-ehl Firmware | <=0114a | |
Vivotek Sd9365-ehl Firmware | ||
Vivotek Iz9361-eh | <=0114a | |
Vivotek Iz9361-eh | ||
Vivotek FD9187-H Firmware | <=0121d | |
Vivotek FD9187-H Firmware | ||
Vivotek Fd9187-ht Firmware | <=0121d | |
Vivotek FD9187-HT | ||
Vivotek FD9387-EHTV-A Firmware | <=0121d | |
Vivotek Fd9387-ehtv Firmware | ||
Vivotek FD9387-EHV | <=0121d | |
Vivotek FD9387-EHV | ||
Vivotek Fd9387-htv Firmware | <=0121d | |
Vivotek Fd9387-htv Firmware | ||
Vivotek Fd9387-hv | <=0121d | |
Vivotek Fd9387-hv Firmware | ||
Vivotek IB9387-EH | <=0121d | |
Vivotek IB9387-EH | ||
Vivotek Ib9387-eht-a Firmware | <=0121d | |
Vivotek IB9387-EHT | ||
Vivotek IB9387-H Firmware | <=0121d | |
Vivotek IB9387-H | ||
Vivotek Ib9387-ht Firmware | <=0121d | |
Vivotek IB9387-HT | ||
Vivotek Fd9189-hm Firmware | <=0121d | |
Vivotek Fd9189-hm Firmware | ||
Vivotek FD9189-HM | <=0121d | |
Vivotek Fd9189-hm Firmware | ||
Vivotek Fd9189-ht Firmware | <=0121d | |
Vivotek FD9189-HT | ||
Vivotek Fd9389-hv Firmware | <=0121d | |
Vivotek Fd9389-hv Firmware | ||
Vivotek FD9389-HMV | <=0121d | |
Vivotek FD9389-HMV | ||
Vivotek FD9389-EHTV Firmware | <=0121d | |
Vivotek FD9389-EHTV Firmware | ||
Vivotek Fd9389-ehv Firmware | <=0121d | |
Vivotek Fd9389-ehv Firmware | ||
Vivotek FD9389-EHTV Firmware | <=0121d | |
Vivotek FD9389-EHTV Firmware | ||
Vivotek FD9389-EHV | <=0121d | |
Vivotek FD9389-EHV | ||
Vivotek IB9389-EH Firmware | <=0121d | |
Vivotek IB9389-EH Firmware | ||
Vivotek IB9389-EHM | <=0121d | |
Vivotek Ib9389-ehm Firmware | ||
Vivotek IB9389-EHT Firmware | <=0121d | |
Vivotek IB9389-EHT Firmware | ||
Vivotek IB9389-H Firmware | <=0121d | |
Vivotek IT9389-H | ||
Vivotek Ib9389-hm Firmware | <=0121d | |
Vivotek Ib9389-hm Firmware | ||
Vivotek IB9389-HT Firmware | <=0121d | |
Vivotek IB9389-HT Firmware | ||
Vivotek Fd9165-ht Firmware | <=0121d | |
Vivotek FD9165-HT-A | ||
Vivotek Fd9365-ehtv Firmware | <=0121d | |
Vivotek Fd9365-ehtv Firmware | ||
Vivotek Fd9365-htv Firmware | <=0121d | |
Vivotek Fd9365-htv-a Firmware | ||
Vivotek FD9365-HTVL | <=0121d | |
Vivotek FD9365-HTVL | ||
Vivotek IB9365-HT-A Firmware | <=0121d | |
Vivotek IB9365-HT-A Firmware | ||
Vivotek IB9365-EHT | <=0121d | |
Vivotek IB9365-EHT | ||
Vivotek Ip9165-hp | <=0121d | |
Vivotek IP9165-HP Firmware | ||
Vivotek IP9165-HT Firmware | <=0121d | |
Vivotek IP9165-HT Firmware | ||
Vivotek IP9165-LPC (i-CS Kit) Firmware | <=0121d | |
Vivotek IP9165-LPC (I-CS Kit) | ||
Vivotek Fd9391-ehtv Firmware | <=0121d | |
Vivotek FD9391-EHTV | ||
Vivotek FE9191 | <=0124c | |
Vivotek Fe9191 Firmware | ||
Vivotek IP9191-HP Firmware | <=0121d | |
Vivotek IP9191-HP Firmware | ||
Vivotek IP9191-HT Firmware | <=0121d | |
Vivotek IP9191-HT Firmware | ||
Vivotek Fe9391-ev Firmware | <=0124c | |
Vivotek Fe9391-ev Firmware | ||
Vivotek IB9391-EHT | <=0121d | |
Vivotek IB9391-EHT | ||
Vivotek Ip9172-lpc Firmware | <=0121d | |
Vivotek IP9172-LPC | ||
Vivotek It9389-h Firmware | <=0121d | |
Vivotek It9389-h Firmware | ||
Vivotek It9389-ht Firmware | <=0121d | |
Vivotek IT9389-HT | ||
Vivotek MD9561-H | <=0121d | |
Vivotek MD9561-H | ||
Vivotek MD9581-H Firmware | <=0121d | |
Vivotek MD9581-H Firmware | ||
Vivotek Ms9390-hv Firmware | <=0121d | |
Vivotek Ms9390-hv Firmware | ||
Vivotek TB9330-E Firmware | <=0121d | |
Vivotek TB9330-E | ||
Vivotek Tb9331-e Firmware | <=0121d | |
Vivotek TB9331-E | ||
Vivotek SD9374-EHL Firmware | <=0123b | |
Vivotek SD9374-EHL | ||
Vivotek FD9167-H | <=0113b | |
Vivotek FD9167-H Firmware | ||
Vivotek FD9167-H | <=0113b | |
Vivotek FD9167-HT Firmware | ||
Vivotek FD9367-EHTV | <=0113b | |
Vivotek FD9367-EHTV | ||
Vivotek Fd9367-htv (epoc) Firmware | <=0113b | |
Vivotek FD9367-HTV (Epoc) Firmware | ||
Vivotek Fd9367-hv Firmware | <=0113b | |
Vivotek Fd9367-hv Firmware | ||
Vivotek Fd9367-htv (epoc) Firmware | ||
Vivotek FD9367-HTV (EPoC) | ||
Vivotek Ib9367-eh Firmware | <=0113b | |
Vivotek IB9367-EH | ||
Vivotek Ib9367-eh Firmware | <=0113b | |
Vivotek Ib9367-eh Firmware | ||
Vivotek IB9367-H Firmware | <=0113b | |
Vivotek IB9367-H Firmware | ||
Vivotek IB9367-H Firmware | <=0113b | |
Vivotek IB9367-HT Firmware | ||
Vivotek Ip9167-hp Firmware | <=0113b | |
Vivotek Ip9167-hp Firmware | ||
Vivotek IP9167-HT Firmware | <=0113b | |
Vivotek IP9167-HT | ||
Vivotek Ma9321-ehtv Firmware | <=0113a | |
Vivotek Ma9321-ehtv Firmware | ||
Vivotek Ms9321-ehv Firmware | <=0100i | |
Vivotek MS9321-EHV | ||
Vivotek MA9322-EHTV Firmware | <=0114c | |
Vivotek MA9322-EHTV Firmware | ||
Vivotek FD8177-H Firmware | <=0113b | |
Vivotek FD8177-HT | ||
Vivotek FD8377-HV | <=0113b | |
Vivotek FD8377-HV Firmware | ||
Vivotek FD8177-H Firmware | <=0113b | |
Vivotek Fd8177-ht Firmware | ||
Vivotek Fd8377-ehtv Firmware | <=0113b | |
Vivotek FD8377-EHTV | ||
Vivotek Fd8377-htv Firmware | <=0113b | |
Vivotek Fd8377-htv Firmware | ||
Vivotek FD8179-H | <=0113b | |
Vivotek Fd8179-h Firmware | ||
Vivotek FD8379-HV Firmware | <=0113b | |
Vivotek FD8379-HV Firmware | ||
Vivotek IB8377-HT | <=0113b | |
Vivotek IB8377-HT | ||
Vivotek IB8377-HT | <=0113b | |
Vivotek IB8377-HT | ||
Vivotek IB8377-EHT | <=0113b | |
Vivotek IB8377-EHT Firmware | ||
Vivotek Fd9165-ht-a Firmware | <=0100m | |
Vivotek FD9165-HT | ||
Vivotek Fd9365-htv-a Firmware | <=0100m | |
Vivotek Fd9365-htv-a Firmware | ||
Vivotek Fd9365-htv-a Firmware | <=0100m | |
Vivotek Fd9365-ehtv-a Firmware | ||
Vivotek Fd9187-ht-a | <=0100m | |
Vivotek Fd9187-ht Firmware | ||
Vivotek Fd9387-htv Firmware | <=0100m | |
Vivotek Fd9387-htv-a Firmware | ||
Vivotek FD9387-EHTV | <=0100m | |
Vivotek FD9387-EHTV | ||
Vivotek IB9365-EHT-A Firmware | <=0100m | |
Vivotek IB9365-EHT-A Firmware | ||
Vivotek IB9365-HT-A Firmware | <=0100m | |
Vivotek IB9365-HT-A | ||
Vivotek Ib9387-eht-a Firmware | <=0100m | |
Vivotek Ib9387-eht-a Firmware | ||
Vivotek IB9387-HT-A Firmware | <=0100m | |
Vivotek IB9387-HT-A Firmware | ||
Vivotek IP9164-HT Firmware | <=0100m | |
Vivotek IP9164-HT Firmware | ||
Vivotek IP9164-LPC Firmware | <=0100m | |
Vivotek IP9164-LPC Firmware | ||
Vivotek IP9165-LPC (i-CS Kit) Firmware | <=0113d | |
Vivotek IP9165-LPC (I-CS Kit) |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2020-11949 is considered high due to its potential for unauthorized file access on VIVOTEK Network Cameras.
To fix CVE-2020-11949, upgrade your VIVOTEK Network Camera firmware to version XXXXX-VVTK-2.2002.xx.01x or later.
CVE-2020-11949 affects various models including, but not limited to, IT9388-HT, CC9381-HV, and FD9360-H.
An attacker exploiting CVE-2020-11949 can gain unauthorized access to arbitrary files on the camera's local filesystem.
Yes, CVE-2020-11949 requires the attacker to be an authenticated user to access the vulnerable functionality.