Advisory Published
Updated

CVE-2020-11949

First published: Thu May 28 2020(Updated: )

testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Vivotek CC9381-HV Firmware<=0222g
Vivotek CC9381-HV Firmware
Vivotek FD9360-H Firmware<=0222g
Vivotek FD9360-H Firmware
Vivotek Fd9368-htv<=0222g
Vivotek Fd9368-htv Firmware
Vivotek FD9380-H<=0222g
Vivotek FD9380-H
Vivotek FD9388-HTV<=0222g
Vivotek FD9388-HTV
Vivotek IB9360-H<=0222g
Vivotek IB9360-H Firmware
Vivotek Ib9368-ht Firmware<=0222g
Vivotek IB9368-HT
Vivotek IB9380-H<=0222g
Vivotek IB9380-H
Vivotek IB9388-HT<=0222g
Vivotek IB9388-HT
Vivotek IT9360-H<=0222g
Vivotek IT9360-H Firmware
Vivotek It9380-h Firmware<=0222g
Vivotek It9380-h Firmware
Vivotek It9388-ht Firmware<=0222g
Vivotek It9388-ht Firmware
Vivotek Md9560-h Firmware<=0222g
Vivotek Md9560-dh Firmware
Vivotek MD9560-H<=0222g
Vivotek MD9560-H
Vivotek FD9366-HV Firmware<=0222g
Vivotek FD9366-HV
Vivotek Fd9166-hn Firmware<=0222g
Vivotek Fd9166-hn Firmware
Vivotek FE9380-HV<=0222k
Vivotek Fe9380-hv Firmware
Vivotek CC8160 (HS)<=0113b
Vivotek CC8160 Firmware
Vivotek CC8160 Firmware<=0113b
Vivotek CC8160 (HS)
Vivotek CC8370-HV Firmware<=0213b
Vivotek CC8370-HV Firmware
Vivotek CC8371-HV<=0113b
Vivotek CC8371-HV Firmware
Vivotek CD8371-HNTV<=0113b
Vivotek CD8371-HNTV Firmware
Vivotek Cd8371-hnvf2 Firmware<=0113b
Vivotek Cd8371-hnvf2 Firmware
Vivotek FD8166A<=0213b
Vivotek FD8166A-N Firmware
Vivotek FD8166A-N<=0113b
Vivotek FD8166A-N Firmware
Vivotek FD8167A-S Firmware<=0213b
Vivotek FD8167A-S
Vivotek FD8169A<=0213b
Vivotek FD8169A-S
Vivotek FD8367A-V<=0213b
Vivotek FD8367A-V
Vivotek FD8369A-V<=0213b
Vivotek Fd8369a-v Firmware
Vivotek FD816BA-HF2<=0113b
Vivotek FD816BA-HF2
Vivotek Fd836ba-hvf2 Firmware<=0113b
Vivotek FD836BA-HVF2
Vivotek Fd836ba-htv Firmware<=0113b
Vivotek Fd836ba-htv Firmware
Vivotek FD836B-EHVF2 Firmware<=0113b
Vivotek FD836BA-EHVF2
Vivotek FD816BA-HT Firmware<=0113b
Vivotek FD816BA-HT Firmware
Vivotek FD836BA-EHTV<=0113b
Vivotek Fd836ba-ehtv Firmware
Vivotek IB836BA-EHF3<=0113b
Vivotek IB836BA-EHF3 Firmware
Vivotek IB836BA-EHT<=0113b
Vivotek IB836BA-EHT
Vivotek IB836BA-HF3<=0113b
Vivotek IB836BA-HF3
Vivotek IB836BA-HT<=0113b
Vivotek IB836BA-HT Firmware
Vivotek FD816B-HF2 Firmware<=0113b
Vivotek FD816B-HF2 Firmware
Vivotek FD816B-HT<=0113b
Vivotek Fd816b-ht Firmware
Vivotek Fd836b-ehtv Firmware<=0113b
Vivotek FD836B-EHTV
Vivotek FD836BA-EHVF2<=0113b
Vivotek FD836B-EHVF2 Firmware
Vivotek Fd836b-htv Firmware<=0113b
Vivotek FD836B-HTV
Vivotek FD836B-HVF2<=0113b
Vivotek FD836BA-HVF2
Vivotek IB836B-EHF3<=0113b
Vivotek IB836B-EHF3
Vivotek Ib836b-eht Firmware<=0113b
Vivotek Ib836b-eht Firmware
Vivotek IB836BA-HF3<=0113b
Vivotek IB836B-HF3 Firmware
Vivotek IB836B-HRF3<=0113b
Vivotek IB836B-HRF3 Firmware
Vivotek IB836B-HT Firmware<=0113b
Vivotek IB836B-HT Firmware
Vivotek FD816CA-HF2<=0113b
Vivotek FD816CA-HF2
Vivotek FD816C-HF2<=0213b
Vivotek FD816C-HF2 Firmware
Vivotek FD8182-F1<=0113b
Vivotek FD8182-F1
Vivotek FD8182-F2<=0113b
Vivotek Fd8182-f2 Firmware
Vivotek FD8182-T<=0113b
Vivotek FD8182-T Firmware
Vivotek Fd8382-etv<=0113b
Vivotek Fd8382-etv Firmware
Vivotek FD8382-EVF2<=0113b
Vivotek Fd8382-vf2 Firmware
Vivotek FD8382-TV<=0113b
Vivotek FD8382-TV
Vivotek FD8382-VF2<=0113b
Vivotek Fd8382-tv Firmware
Vivotek IB8382-F3 Firmware<=0113b
Vivotek IB8382-F3 Firmware
Vivotek IB8382-ET<=0113b
Vivotek IB8382-ET
Vivotek IB8382-F3<=0213b
Vivotek IB8382-T Firmware
Vivotek IB8382-T<=0113b
Vivotek IB8382-T Firmware
Vivotek FD8366-V<=0113b
Vivotek FD8366-V Firmware
Vivotek IB8367A Firmware<=0213b
Vivotek IB8367A Firmware
Vivotek IB8369A Firmware<=0213b
Vivotek IB8369A Firmware
Vivotek IP8166 Firmware<=0213b
Vivotek IP8166 Firmware
Vivotek MD8563-DEH<=0113b
Vivotek MD8563-DEH Firmware
Vivotek MD8563-EH<=0113b
Vivotek Md8563-eh Firmware
Vivotek Md8563-eh Firmware<=0113b
Vivotek Md8563-eh Firmware
Vivotek MD8565-N<=0113b
Vivotek MD8565-N
Vivotek VC8101 Firmware<=0113b
Vivotek VC8101 Firmware
Vivotek VS8100-v2<=0113b
Vivotek VS8100-v2
Vivotek IP8160 Firmware<=0113a
Vivotek IP8160 Firmware
Vivotek IP8160 Firmware<=0113a
Vivotek IP8160 Firmware
Vivotek IB8360-W Firmware<=0113a
Vivotek IB8360-W
Vivotek IB8360-W Firmware<=0113a
Vivotek IB8360-W Firmware
Vivotek IP9171-HP Firmware<=0113b
Vivotek IP9171-HP Firmware
Vivotek IP9181-H Firmware<=0113b
Vivotek IP9181-H Firmware
Vivotek Fd9371-(e)htv Firmware<=0113b
Vivotek Fd9371-ehtv Firmware
Vivotek Fd9381-(e)htv Firmware<=0113b
Vivotek Fd9381-ehtv Firmware
Vivotek IB9371-EHT Firmware<=0113b
Vivotek IB9371-EHT Firmware
Vivotek IB9381-(e)HT Firmware<=0113b
Vivotek IB9381-(e)HT Firmware
Vivotek FD9171-HT<=0113b
Vivotek Fd9171-ht Firmware
Vivotek Fd9181-ht Firmware<=0113b
Vivotek Fd9181-ht Firmware
Vivotek FE9181-H<=0113b
Vivotek Fe9181-h Firmware
Vivotek Fe9182-h Firmware<=0113b
Vivotek Fe9182-h Firmware
Vivotek Fe9381-ehv<=0113b
Vivotek Fe9381-ehv Firmware
Vivotek Fe9382-ehv<=0113b
Vivotek Fe9382-ehv Firmware
Vivotek FE9180-H Firmware<=0113b
Vivotek FE9180-H Firmware
Vivotek Fe9582-ehnv<=0113b
Vivotek Fe9582-ehnv Firmware
Vivotek SD9161-H Firmware<=0114a
Vivotek SD9161-H Firmware
Vivotek SD9361-EHL<=0114a
Vivotek SD9361-EHL
Vivotek SD9362-EHL Firmware<=0114a
Vivotek SD9362-EHL
Vivotek SD9362-EH-V2<=0114a
Vivotek Sd9362-eh Firmware
Vivotek Sd9363-ehl-v2 Firmware<=0114a
Vivotek Sd9363-ehl-v2 Firmware
Vivotek SD9364-EH<=0114a
Vivotek SD9364-EH
Vivotek SD9364-EHL Firmware<=0114a
Vivotek SD9364-EHL Firmware
Vivotek Sd9363-ehl-v2 Firmware<=0114a
Vivotek SD9363-EHL-V2
Vivotek SD9364-EHL-V2 Firmware<=0114a
Vivotek SD9364-EHL-V2
Vivotek SD9362-EH V2 Firmware<=0104j
Vivotek SD9362-EH V2 Firmware
Vivotek Sd9364-eh-v2<=0104j
Vivotek Sd9364-eh-v2 Firmware
Vivotek SD9366-EH-V2 Firmware<=0104j
Vivotek SD9366-EH-V2 Firmware
Vivotek SD9366-EHL Firmware<=0114a
Vivotek SD9366-EHL Firmware
Vivotek Sd9366-eh Firmware<=0114a
Vivotek SD9366-EH
Vivotek Sd9365-ehl Firmware<=0114a
Vivotek Sd9365-ehl Firmware
Vivotek Iz9361-eh<=0114a
Vivotek Iz9361-eh
Vivotek FD9187-H Firmware<=0121d
Vivotek FD9187-H Firmware
Vivotek Fd9187-ht Firmware<=0121d
Vivotek FD9187-HT
Vivotek FD9387-EHTV-A Firmware<=0121d
Vivotek Fd9387-ehtv Firmware
Vivotek FD9387-EHV<=0121d
Vivotek FD9387-EHV
Vivotek Fd9387-htv Firmware<=0121d
Vivotek Fd9387-htv Firmware
Vivotek Fd9387-hv<=0121d
Vivotek Fd9387-hv Firmware
Vivotek IB9387-EH<=0121d
Vivotek IB9387-EH
Vivotek Ib9387-eht-a Firmware<=0121d
Vivotek IB9387-EHT
Vivotek IB9387-H Firmware<=0121d
Vivotek IB9387-H
Vivotek Ib9387-ht Firmware<=0121d
Vivotek IB9387-HT
Vivotek Fd9189-hm Firmware<=0121d
Vivotek Fd9189-hm Firmware
Vivotek FD9189-HM<=0121d
Vivotek Fd9189-hm Firmware
Vivotek Fd9189-ht Firmware<=0121d
Vivotek FD9189-HT
Vivotek Fd9389-hv Firmware<=0121d
Vivotek Fd9389-hv Firmware
Vivotek FD9389-HMV<=0121d
Vivotek FD9389-HMV
Vivotek FD9389-EHTV Firmware<=0121d
Vivotek FD9389-EHTV Firmware
Vivotek Fd9389-ehv Firmware<=0121d
Vivotek Fd9389-ehv Firmware
Vivotek FD9389-EHTV Firmware<=0121d
Vivotek FD9389-EHTV Firmware
Vivotek FD9389-EHV<=0121d
Vivotek FD9389-EHV
Vivotek IB9389-EH Firmware<=0121d
Vivotek IB9389-EH Firmware
Vivotek IB9389-EHM<=0121d
Vivotek Ib9389-ehm Firmware
Vivotek IB9389-EHT Firmware<=0121d
Vivotek IB9389-EHT Firmware
Vivotek IB9389-H Firmware<=0121d
Vivotek IT9389-H
Vivotek Ib9389-hm Firmware<=0121d
Vivotek Ib9389-hm Firmware
Vivotek IB9389-HT Firmware<=0121d
Vivotek IB9389-HT Firmware
Vivotek Fd9165-ht Firmware<=0121d
Vivotek FD9165-HT-A
Vivotek Fd9365-ehtv Firmware<=0121d
Vivotek Fd9365-ehtv Firmware
Vivotek Fd9365-htv Firmware<=0121d
Vivotek Fd9365-htv-a Firmware
Vivotek FD9365-HTVL<=0121d
Vivotek FD9365-HTVL
Vivotek IB9365-HT-A Firmware<=0121d
Vivotek IB9365-HT-A Firmware
Vivotek IB9365-EHT<=0121d
Vivotek IB9365-EHT
Vivotek Ip9165-hp<=0121d
Vivotek IP9165-HP Firmware
Vivotek IP9165-HT Firmware<=0121d
Vivotek IP9165-HT Firmware
Vivotek IP9165-LPC (i-CS Kit) Firmware<=0121d
Vivotek IP9165-LPC (I-CS Kit)
Vivotek Fd9391-ehtv Firmware<=0121d
Vivotek FD9391-EHTV
Vivotek FE9191<=0124c
Vivotek Fe9191 Firmware
Vivotek IP9191-HP Firmware<=0121d
Vivotek IP9191-HP Firmware
Vivotek IP9191-HT Firmware<=0121d
Vivotek IP9191-HT Firmware
Vivotek Fe9391-ev Firmware<=0124c
Vivotek Fe9391-ev Firmware
Vivotek IB9391-EHT<=0121d
Vivotek IB9391-EHT
Vivotek Ip9172-lpc Firmware<=0121d
Vivotek IP9172-LPC
Vivotek It9389-h Firmware<=0121d
Vivotek It9389-h Firmware
Vivotek It9389-ht Firmware<=0121d
Vivotek IT9389-HT
Vivotek MD9561-H<=0121d
Vivotek MD9561-H
Vivotek MD9581-H Firmware<=0121d
Vivotek MD9581-H Firmware
Vivotek Ms9390-hv Firmware<=0121d
Vivotek Ms9390-hv Firmware
Vivotek TB9330-E Firmware<=0121d
Vivotek TB9330-E
Vivotek Tb9331-e Firmware<=0121d
Vivotek TB9331-E
Vivotek SD9374-EHL Firmware<=0123b
Vivotek SD9374-EHL
Vivotek FD9167-H<=0113b
Vivotek FD9167-H Firmware
Vivotek FD9167-H<=0113b
Vivotek FD9167-HT Firmware
Vivotek FD9367-EHTV<=0113b
Vivotek FD9367-EHTV
Vivotek Fd9367-htv (epoc) Firmware<=0113b
Vivotek FD9367-HTV (Epoc) Firmware
Vivotek Fd9367-hv Firmware<=0113b
Vivotek Fd9367-hv Firmware
Vivotek Fd9367-htv (epoc) Firmware
Vivotek FD9367-HTV (EPoC)
Vivotek Ib9367-eh Firmware<=0113b
Vivotek IB9367-EH
Vivotek Ib9367-eh Firmware<=0113b
Vivotek Ib9367-eh Firmware
Vivotek IB9367-H Firmware<=0113b
Vivotek IB9367-H Firmware
Vivotek IB9367-H Firmware<=0113b
Vivotek IB9367-HT Firmware
Vivotek Ip9167-hp Firmware<=0113b
Vivotek Ip9167-hp Firmware
Vivotek IP9167-HT Firmware<=0113b
Vivotek IP9167-HT
Vivotek Ma9321-ehtv Firmware<=0113a
Vivotek Ma9321-ehtv Firmware
Vivotek Ms9321-ehv Firmware<=0100i
Vivotek MS9321-EHV
Vivotek MA9322-EHTV Firmware<=0114c
Vivotek MA9322-EHTV Firmware
Vivotek FD8177-H Firmware<=0113b
Vivotek FD8177-HT
Vivotek FD8377-HV<=0113b
Vivotek FD8377-HV Firmware
Vivotek FD8177-H Firmware<=0113b
Vivotek Fd8177-ht Firmware
Vivotek Fd8377-ehtv Firmware<=0113b
Vivotek FD8377-EHTV
Vivotek Fd8377-htv Firmware<=0113b
Vivotek Fd8377-htv Firmware
Vivotek FD8179-H<=0113b
Vivotek Fd8179-h Firmware
Vivotek FD8379-HV Firmware<=0113b
Vivotek FD8379-HV Firmware
Vivotek IB8377-HT<=0113b
Vivotek IB8377-HT
Vivotek IB8377-HT<=0113b
Vivotek IB8377-HT
Vivotek IB8377-EHT<=0113b
Vivotek IB8377-EHT Firmware
Vivotek Fd9165-ht-a Firmware<=0100m
Vivotek FD9165-HT
Vivotek Fd9365-htv-a Firmware<=0100m
Vivotek Fd9365-htv-a Firmware
Vivotek Fd9365-htv-a Firmware<=0100m
Vivotek Fd9365-ehtv-a Firmware
Vivotek Fd9187-ht-a<=0100m
Vivotek Fd9187-ht Firmware
Vivotek Fd9387-htv Firmware<=0100m
Vivotek Fd9387-htv-a Firmware
Vivotek FD9387-EHTV<=0100m
Vivotek FD9387-EHTV
Vivotek IB9365-EHT-A Firmware<=0100m
Vivotek IB9365-EHT-A Firmware
Vivotek IB9365-HT-A Firmware<=0100m
Vivotek IB9365-HT-A
Vivotek Ib9387-eht-a Firmware<=0100m
Vivotek Ib9387-eht-a Firmware
Vivotek IB9387-HT-A Firmware<=0100m
Vivotek IB9387-HT-A Firmware
Vivotek IP9164-HT Firmware<=0100m
Vivotek IP9164-HT Firmware
Vivotek IP9164-LPC Firmware<=0100m
Vivotek IP9164-LPC Firmware
Vivotek IP9165-LPC (i-CS Kit) Firmware<=0113d
Vivotek IP9165-LPC (I-CS Kit)

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2020-11949?

    The severity of CVE-2020-11949 is considered high due to its potential for unauthorized file access on VIVOTEK Network Cameras.

  • How do I fix CVE-2020-11949?

    To fix CVE-2020-11949, upgrade your VIVOTEK Network Camera firmware to version XXXXX-VVTK-2.2002.xx.01x or later.

  • What types of VIVOTEK cameras are affected by CVE-2020-11949?

    CVE-2020-11949 affects various models including, but not limited to, IT9388-HT, CC9381-HV, and FD9360-H.

  • What can an attacker do with CVE-2020-11949?

    An attacker exploiting CVE-2020-11949 can gain unauthorized access to arbitrary files on the camera's local filesystem.

  • Is authentication required to exploit CVE-2020-11949?

    Yes, CVE-2020-11949 requires the attacker to be an authenticated user to access the vulnerable functionality.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203