CVE-2020-11949: Medium severity vivotek cc9381-hv firmware vulnerability
Published May 28, 2020
·Updated
testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXXBeta2) allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices.
Affected Software
388 affected components
Vivotek Cc9381-hv Firmware<=0222g
Vivotek Cc9381-hv
Vivotek Fd9360-h Firmware<=0222g
Vivotek Fd9360-h
Vivotek Fd9368-htv Firmware<=0222g
Vivotek Fd9368-htv
Vivotek Fd9380-h Firmware<=0222g
Vivotek Fd9380-h
Vivotek Fd9388-htv Firmware<=0222g
Vivotek Fd9388-htv
Vivotek Ib9360-h Firmware<=0222g
Vivotek Ib9360-h
Vivotek Ib9368-ht Firmware<=0222g
Vivotek Ib9368-ht
Vivotek Ib9380-h Firmware<=0222g
Vivotek Ib9380-h
Vivotek Ib9388-ht Firmware<=0222g
Vivotek Ib9388-ht
Vivotek It9360-h Firmware<=0222g
Vivotek It9360-h
Vivotek It9380-h Firmware<=0222g
Vivotek It9380-h
Vivotek It9388-ht Firmware<=0222g
Vivotek IT9388-HT
Vivotek Md9560-dh Firmware<=0222g
Vivotek Md9560-dh
Vivotek Md9560-h Firmware<=0222g
Vivotek Md9560-h
Vivotek Fd9366-hv Firmware<=0222g
Vivotek Fd9366-hv
Vivotek Fd9166-hn Firmware<=0222g
Vivotek Fd9166-hn
Vivotek Fe9380-hv Firmware<=0222k
Vivotek Fe9380-hv
Vivotek Cc8160 Firmware<=0113b
Vivotek CC8160
Vivotek Cc8160\(hs\) Firmware<=0113b
Vivotek Cc8160\(hs\)
Vivotek Cc8370-hv Firmware<=0213b
Vivotek Cc8370-hv
Vivotek Cc8371-hv Firmware<=0113b
Vivotek Cc8371-hv
Vivotek Cd8371-hntv Firmware<=0113b
Vivotek Cd8371-hntv
Vivotek Cd8371-hnvf2 Firmware<=0113b
Vivotek Cd8371-hnvf2
Vivotek Fd8166a Firmware<=0213b
Vivotek Fd8166a
Vivotek Fd8166a-n Firmware<=0113b
Vivotek Fd8166a-n
Vivotek Fd8167a Firmware<=0213b
Vivotek Fd8167a
Vivotek Fd8169a Firmware<=0213b
Vivotek Fd8169a
Vivotek Fd8367a-v Firmware<=0213b
Vivotek Fd8367a-v
Vivotek Fd8369a-v Firmware<=0213b
Vivotek Fd8369a-v
Vivotek Fd816ba-hf2 Firmware<=0113b
Vivotek Fd816ba-hf2
Vivotek Fd836ba-hvf2 Firmware<=0113b
Vivotek Fd836ba-hvf2
Vivotek Fd836ba-htv Firmware<=0113b
Vivotek Fd836ba-htv
Vivotek Fd836ba-ehvf2 Firmware<=0113b
Vivotek Fd836ba-ehvf2
Vivotek Fd816ba-ht Firmware<=0113b
Vivotek Fd816ba-ht
Vivotek Fd836ba-ehtv Firmware<=0113b
Vivotek Fd836ba-ehtv
Vivotek Ib836ba-ehf3 Firmware<=0113b
Vivotek Ib836ba-ehf3
Vivotek Ib836ba-eht Firmware<=0113b
Vivotek Ib836ba-eht
Vivotek Ib836ba-hf3 Firmware<=0113b
Vivotek Ib836ba-hf3
Vivotek Ib836ba-ht Firmware<=0113b
Vivotek Ib836ba-ht
Vivotek Fd816b-hf2 Firmware<=0113b
Vivotek Fd816b-hf2
Vivotek Fd816b-ht Firmware<=0113b
Vivotek Fd816b-ht
Vivotek Fd836b-ehtv Firmware<=0113b
Vivotek Fd836b-ehtv
Vivotek Fd836b-ehvf2 Firmware<=0113b
Vivotek Fd836b-ehvf2
Vivotek Fd836b-htv Firmware<=0113b
Vivotek Fd836b-htv
Vivotek Fd836b-hvf2 Firmware<=0113b
Vivotek Fd836b-hvf2
Vivotek Ib836b-ehf3 Firmware<=0113b
Vivotek Ib836b-ehf3
Vivotek Ib836b-eht Firmware<=0113b
Vivotek Ib836b-eht
Vivotek Ib836b-hf3 Firmware<=0113b
Vivotek Ib836b-hf3
Vivotek Ib836b-hrf3 Firmware<=0113b
Vivotek Ib836b-hrf3
Vivotek Ib836b-ht Firmware<=0113b
Vivotek Ib836b-ht
Vivotek Fd816ca-hf2 Firmware<=0113b
Vivotek Fd816ca-hf2
Vivotek Fd816c-hf2 Firmware<=0213b
Vivotek Fd816c-hf2
Vivotek Fd8182-f1 Firmware<=0113b
Vivotek Fd8182-f1
Vivotek Fd8182-f2 Firmware<=0113b
Vivotek Fd8182-f2
Vivotek Fd8182-t Firmware<=0113b
Vivotek Fd8182-t
Vivotek Fd8382-etv Firmware<=0113b
Vivotek Fd8382-etv
Vivotek Fd8382-evf2 Firmware<=0113b
Vivotek Fd8382-evf2
Vivotek Fd8382-tv Firmware<=0113b
Vivotek Fd8382-tv
Vivotek Fd8382-vf2 Firmware<=0113b
Vivotek Fd8382-vf2
Vivotek Ib8382-ef3 Firmware<=0113b
Vivotek Ib8382-ef3
Vivotek Ib8382-et Firmware<=0113b
Vivotek Ib8382-et
Vivotek Ib8382-f3 Firmware<=0213b
Vivotek Ib8382-f3
Vivotek Ib8382-t Firmware<=0113b
Vivotek Ib8382-t
Vivotek Fd8366-v Firmware<=0113b
Vivotek Fd8366-v
Vivotek Ib8367a Firmware<=0213b
Vivotek IB8367A
Vivotek Ib8369a Firmware<=0213b
Vivotek Ib8369a
Vivotek Ip8166 Firmware<=0213b
Vivotek Ip8166
Vivotek Md8563-deh Firmware<=0113b
Vivotek Md8563-deh
Vivotek Md8563-eh Firmware<=0113b
Vivotek Md8563-eh
Vivotek Md8564-eh Firmware<=0113b
Vivotek Md8564-eh
Vivotek Md8565-n Firmware<=0113b
Vivotek Md8565-n
Vivotek Vc8101 Firmware<=0113b
Vivotek Vc8101
Vivotek Vs8100-v2 Firmware<=0113b
Vivotek Vs8100-v2
Vivotek Ip8160 Firmware<=0113a
Vivotek Ip8160
Vivotek Ip8160-w Firmware<=0113a
Vivotek Ip8160-w
Vivotek Ib8360 Firmware<=0113a
Vivotek Ib8360
Vivotek Ib8360-w Firmware<=0113a
Vivotek Ib8360-w
Vivotek Ip9171-hp Firmware<=0113b
Vivotek Ip9171-hp
Vivotek Ip9181-h Firmware<=0113b
Vivotek Ip9181-h
Vivotek Fd9371-ehtv Firmware<=0113b
Vivotek Fd9371-ehtv
Vivotek Fd9381-ehtv Firmware<=0113b
Vivotek Fd9381-ehtv
Vivotek Ib9371-eht Firmware<=0113b
Vivotek Ib9371-eht
Vivotek Ib9381-eht Firmware<=0113b
Vivotek Ib9381-eht
Vivotek Fd9171-ht Firmware<=0113b
Vivotek Fd9171-ht
Vivotek Fd9181-ht Firmware<=0113b
Vivotek Fd9181-ht
Vivotek Fe9181-h Firmware<=0113b
Vivotek Fe9181-h
Vivotek Fe9182-h Firmware<=0113b
Vivotek Fe9182-h
Vivotek Fe9381-ehv Firmware<=0113b
Vivotek Fe9381-ehv
Vivotek Fe9382-ehv Firmware<=0113b
Vivotek Fe9382-ehv
Vivotek Fe9180-h Firmware<=0113b
Vivotek Fe9180-h
Vivotek Fe9582-ehnv Firmware<=0113b
Vivotek Fe9582-ehnv
Vivotek Sd9161-h Firmware<=0114a
Vivotek Sd9161-h
Vivotek Sd9361-ehl Firmware<=0114a
Vivotek Sd9361-ehl
Vivotek Sd9362-ehl Firmware<=0114a
Vivotek Sd9362-ehl
Vivotek Sd9362-eh Firmware<=0114a
Vivotek Sd9362-eh
Vivotek Sd9363-ehl Firmware<=0114a
Vivotek Sd9363-ehl
Vivotek Sd9364-eh Firmware<=0114a
Vivotek Sd9364-eh
Vivotek Sd9364-ehl Firmware<=0114a
Vivotek Sd9364-ehl
Vivotek Sd9363-ehl-v2 Firmware<=0114a
Vivotek Sd9363-ehl-v2
Vivotek Sd9364-ehl-v2 Firmware<=0114a
Vivotek Sd9364-ehl-v2
Vivotek Sd9362-eh-v2 Firmware<=0104j
Vivotek Sd9362-eh-v2
Vivotek Sd9364-eh-v2 Firmware<=0104j
Vivotek Sd9364-eh-v2
Vivotek Sd9366-eh-v2 Firmware<=0104j
Vivotek Sd9366-eh-v2
Vivotek Sd9366-ehl Firmware<=0114a
Vivotek Sd9366-ehl
Vivotek Sd9366-eh Firmware<=0114a
Vivotek Sd9366-eh
Vivotek Sd9365-ehl Firmware<=0114a
Vivotek Sd9365-ehl
Vivotek Iz9361-eh Firmware<=0114a
Vivotek Iz9361-eh
Vivotek Fd9187-h Firmware<=0121d
Vivotek Fd9187-h
Vivotek Fd9187-ht Firmware<=0121d
Vivotek Fd9187-ht
Vivotek Fd9387-ehtv Firmware<=0121d
Vivotek Fd9387-ehtv
Vivotek Fd9387-ehv Firmware<=0121d
Vivotek Fd9387-ehv
Vivotek Fd9387-htv Firmware<=0121d
Vivotek Fd9387-htv
Vivotek Fd9387-hv Firmware<=0121d
Vivotek Fd9387-hv
Vivotek Ib9387-eh Firmware<=0121d
Vivotek Ib9387-eh
Vivotek Ib9387-eht Firmware<=0121d
Vivotek Ib9387-eht
Vivotek Ib9387-h Firmware<=0121d
Vivotek Ib9387-h
Vivotek Ib9387-ht Firmware<=0121d
Vivotek Ib9387-ht
Vivotek Fd9189-h Firmware<=0121d
Vivotek Fd9189-h
Vivotek Fd9189-hm Firmware<=0121d
Vivotek Fd9189-hm
Vivotek Fd9189-ht Firmware<=0121d
Vivotek Fd9189-ht
Vivotek Fd9389-hv Firmware<=0121d
Vivotek Fd9389-hv
Vivotek Fd9389-hmv Firmware<=0121d
Vivotek Fd9389-hmv
Vivotek Fd9389-htv Firmware<=0121d
Vivotek Fd9389-htv
Vivotek Fd9389-ehmv Firmware<=0121d
Vivotek Fd9389-ehmv
Vivotek Fd9389-ehtv Firmware<=0121d
Vivotek Fd9389-ehtv
Vivotek Fd9389-ehv Firmware<=0121d
Vivotek Fd9389-ehv
Vivotek Ib9389-eh Firmware<=0121d
Vivotek Ib9389-eh
Vivotek Ib9389-ehm Firmware<=0121d
Vivotek Ib9389-ehm
Vivotek Ib9389-eht Firmware<=0121d
Vivotek Ib9389-eht
Vivotek Ib9389-h Firmware<=0121d
Vivotek Ib9389-h
Vivotek Ib9389-hm Firmware<=0121d
Vivotek Ib9389-hm
Vivotek Ib9389-ht Firmware<=0121d
Vivotek Ib9389-ht
Vivotek Fd9165-ht Firmware<=0121d
Vivotek Fd9165-ht
Vivotek Fd9365-ehtv Firmware<=0121d
Vivotek Fd9365-ehtv
Vivotek Fd9365-htv Firmware<=0121d
Vivotek Fd9365-htv
Vivotek Fd9365-htvl Firmware<=0121d
Vivotek Fd9365-htvl
Vivotek Ib9365-ht Firmware<=0121d
Vivotek Ib9365-ht
Vivotek Ib9365-eht Firmware<=0121d
Vivotek Ib9365-eht
Vivotek Ip9165-hp Firmware<=0121d
Vivotek Ip9165-hp
Vivotek Ip9165-ht Firmware<=0121d
Vivotek Ip9165-ht
Vivotek Ip9165-lpc Firmware<=0121d
Vivotek Ip9165-lpc
Vivotek Fd9391-ehtv Firmware<=0121d
Vivotek Fd9391-ehtv
Vivotek Fe9191 Firmware<=0124c
Vivotek Fe9191
Vivotek Ip9191-hp Firmware<=0121d
Vivotek Ip9191-hp
Vivotek Ip9191-ht Firmware<=0121d
Vivotek Ip9191-ht
Vivotek Fe9391-ev Firmware<=0124c
Vivotek Fe9391-ev
Vivotek Ib9391-eht Firmware<=0121d
Vivotek Ib9391-eht
Vivotek Ip9172-lpc\(freeway\) Firmware<=0121d
Vivotek Ip9172-lpc\(freeway\)
Vivotek It9389-h Firmware<=0121d
Vivotek It9389-h
Vivotek It9389-ht Firmware<=0121d
Vivotek It9389-ht
Vivotek Md9561-h Firmware<=0121d
Vivotek Md9561-h
Vivotek Md9581-h Firmware<=0121d
Vivotek Md9581-h
Vivotek Ms9390-hv Firmware<=0121d
Vivotek Ms9390-hv
Vivotek Tb9330-e Firmware<=0121d
Vivotek Tb9330-e
Vivotek Tb9331-e Firmware<=0121d
Vivotek Tb9331-e
Vivotek Sd9374-ehl Firmware<=0123b
Vivotek Sd9374-ehl
Vivotek Fd9167-h Firmware<=0113b
Vivotek Fd9167-h
Vivotek Fd9167-ht Firmware<=0113b
Vivotek Fd9167-ht
Vivotek Fd9367-ehtv Firmware<=0113b
Vivotek Fd9367-ehtv
Vivotek Fd9367-htv Firmware<=0113b
Vivotek Fd9367-htv
Vivotek Fd9367-hv Firmware<=0113b
Vivotek Fd9367-hv
Vivotek Fd9367-htv\(epoc\) Firmware
Vivotek Fd9367-htv\(epoc\)
Vivotek Ib9367-eh Firmware<=0113b
Vivotek Ib9367-eh
Vivotek Ib9367-eht Firmware<=0113b
Vivotek Ib9367-eht
Vivotek Ib9367-h Firmware<=0113b
Vivotek Ib9367-h
Vivotek Ib9367-ht Firmware<=0113b
Vivotek Ib9367-ht
Vivotek Ip9167-hp Firmware<=0113b
Vivotek Ip9167-hp
Vivotek Ip9167-ht Firmware<=0113b
Vivotek Ip9167-ht
Vivotek Ma9321-ehtv Firmware<=0113a
Vivotek Ma9321-ehtv
Vivotek Ms9321-ehv Firmware<=0100i
Vivotek Ms9321-ehv
Vivotek Ma9322-ehtv Firmware<=0114c
Vivotek Ma9322-ehtv
Vivotek Fd8177-h Firmware<=0113b
Vivotek Fd8177-h
Vivotek Fd8377-hv Firmware<=0113b
Vivotek Fd8377-hv
Vivotek Fd8177-ht Firmware<=0113b
Vivotek Fd8177-ht
Vivotek Fd8377-ehtv Firmware<=0113b
Vivotek Fd8377-ehtv
Vivotek Fd8377-htv Firmware<=0113b
Vivotek Fd8377-htv
Vivotek Fd8179-h Firmware<=0113b
Vivotek Fd8179-h
Vivotek Fd8379-hv Firmware<=0113b
Vivotek Fd8379-hv
Vivotek Ib8377-h Firmware<=0113b
Vivotek Ib8377-h
Vivotek Ib8377-ht Firmware<=0113b
Vivotek Ib8377-ht
Vivotek Ib8377-eht Firmware<=0113b
Vivotek Ib8377-eht
Vivotek Fd9165-ht-a Firmware<=0100m
Vivotek Fd9165-ht-a
Vivotek Fd9365-htv-a Firmware<=0100m
Vivotek Fd9365-htv-a
Vivotek Fd9365-ehtv-a Firmware<=0100m
Vivotek Fd9365-ehtv-a
Vivotek Fd9187-ht-a Firmware<=0100m
Vivotek Fd9187-ht-a
Vivotek Fd9387-htv-a Firmware<=0100m
Vivotek Fd9387-htv-a
Vivotek Fd9387-ehtv-a Firmware<=0100m
Vivotek Fd9387-ehtv-a
Vivotek Ib9365-eht-a Firmware<=0100m
Vivotek Ib9365-eht-a
Vivotek Ib9365-ht-a Firmware<=0100m
Vivotek Ib9365-ht-a
Vivotek Ib9387-eht-a Firmware<=0100m
Vivotek Ib9387-eht-a
Vivotek Ib9387-ht-a Firmware<=0100m
Vivotek Ib9387-ht-a
Vivotek Ip9164-ht Firmware<=0100m
Vivotek Ip9164-ht
Vivotek Ip9164-lpc Firmware<=0100m
Vivotek Ip9164-lpc
Vivotek Ip9165-lpc\(i-cs Kit\) Firmware<=0113d
Vivotek Ip9165-lpc\(i-cs Kit\)
Event History
May 28, 2020
CVE Published
via MITRE·12:43 PM
Data Sourced
via MITRE·12:43 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-11949?
The severity of CVE-2020-11949 is considered high due to its potential for unauthorized file access on VIVOTEK Network Cameras.
2
How do I fix CVE-2020-11949?
To fix CVE-2020-11949, upgrade your VIVOTEK Network Camera firmware to version XXXXX-VVTK-2.2002.xx.01x or later.
3
What types of VIVOTEK cameras are affected by CVE-2020-11949?
CVE-2020-11949 affects various models including, but not limited to, IT9388-HT, CC9381-HV, and FD9360-H.
4
What can an attacker do with CVE-2020-11949?
An attacker exploiting CVE-2020-11949 can gain unauthorized access to arbitrary files on the camera's local filesystem.
5
Is authentication required to exploit CVE-2020-11949?
Yes, CVE-2020-11949 requires the attacker to be an authenticated user to access the vulnerable functionality.