CWE
78
Advisory Published
Updated

CVE-2020-11950: OS Command Injection

First published: Thu May 28 2020(Updated: )

VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution of OS commands). For example, this affects IT9388-HT devices.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Vivotek CC9381-HV Firmware<=0222g
Vivotek CC9381-HV Firmware
Vivotek FD9360-H Firmware<=0222g
Vivotek FD9360-H Firmware
Vivotek Fd9368-htv<=0222g
Vivotek Fd9368-htv Firmware
Vivotek FD9380-H<=0222g
Vivotek FD9380-H
Vivotek FD9388-HTV<=0222g
Vivotek FD9388-HTV
Vivotek IB9360-H<=0222g
Vivotek IB9360-H Firmware
Vivotek Ib9368-ht Firmware<=0222g
Vivotek IB9368-HT
Vivotek IB9380-H<=0222g
Vivotek IB9380-H
Vivotek IB9388-HT<=0222g
Vivotek IB9388-HT
Vivotek IT9360-H<=0222g
Vivotek IT9360-H Firmware
Vivotek It9380-h Firmware<=0222g
Vivotek It9380-h Firmware
Vivotek It9388-ht Firmware<=0222g
Vivotek It9388-ht Firmware
Vivotek Md9560-h Firmware<=0222g
Vivotek Md9560-dh Firmware
Vivotek MD9560-H<=0222g
Vivotek MD9560-H
Vivotek FD9366-HV Firmware<=0222g
Vivotek FD9366-HV
Vivotek Fd9166-hn Firmware<=0222g
Vivotek Fd9166-hn Firmware
Vivotek FE9380-HV<=0222g
Vivotek Fe9380-hv Firmware
Vivotek CC8160 (HS)<=0222g
Vivotek CC8160 Firmware
Vivotek CC8160 Firmware<=0222g
Vivotek CC8160 (HS)
Vivotek CC8370-HV Firmware<=0222g
Vivotek CC8370-HV Firmware
Vivotek CC8371-HV<=0222g
Vivotek CC8371-HV Firmware
Vivotek CD8371-HNTV<=0222g
Vivotek CD8371-HNTV Firmware
Vivotek Cd8371-hnvf2 Firmware<=0222g
Vivotek Cd8371-hnvf2 Firmware
Vivotek FD8166A<=0222g
Vivotek FD8166A-N Firmware
Vivotek FD8166A-N<=0222g
Vivotek FD8166A-N Firmware
Vivotek FD8167A-S Firmware<=0222g
Vivotek FD8167A-S
Vivotek FD8167A-S<=0222g
Vivotek FD8167A-S Firmware
Vivotek FD8169A<=0222g
Vivotek FD8169A-S
Vivotek FD8169A<=0222g
Vivotek FD8169A-S Firmware
Vivotek FD8367A-V<=0222g
Vivotek FD8367A-V
Vivotek FD8369A-V<=0222g
Vivotek Fd8369a-v Firmware
Vivotek FD816BA-HF2<=0222g
Vivotek FD816BA-HF2
Vivotek Fd836ba-hvf2 Firmware<=0222g
Vivotek FD836BA-HVF2
Vivotek Fd836ba-htv Firmware<=0222g
Vivotek Fd836ba-htv Firmware
Vivotek FD836B-EHVF2 Firmware<=0222g
Vivotek FD836BA-EHVF2
Vivotek FD816BA-HT Firmware<=0222g
Vivotek FD816BA-HT Firmware
Vivotek FD836BA-EHTV<=0222g
Vivotek Fd836ba-ehtv Firmware
Vivotek IB836BA-EHF3<=0222g
Vivotek IB836BA-EHF3 Firmware
Vivotek IB836BA-EHT<=0222g
Vivotek IB836BA-EHT
Vivotek IB836BA-HF3<=0222g
Vivotek IB836BA-HF3
Vivotek IB836BA-HT<=0222g
Vivotek IB836BA-HT Firmware
Vivotek FD816B-HF2 Firmware<=0222g
Vivotek FD816B-HF2 Firmware
Vivotek FD816B-HT<=0222g
Vivotek Fd816b-ht Firmware
Vivotek Fd836b-ehtv Firmware<=0222g
Vivotek FD836B-EHTV
Vivotek FD836BA-EHVF2<=0222g
Vivotek FD836B-EHVF2 Firmware
Vivotek Fd836b-htv Firmware<=0222g
Vivotek FD836B-HTV
Vivotek FD836B-HVF2<=0222g
Vivotek FD836BA-HVF2
Vivotek IB836B-EHF3<=0222g
Vivotek IB836B-EHF3
Vivotek Ib836b-eht Firmware<=0222g
Vivotek Ib836b-eht Firmware
Vivotek IB836BA-HF3<=0222g
Vivotek IB836B-HF3 Firmware
Vivotek IB836B-HRF3<=0222g
Vivotek IB836B-HRF3 Firmware
Vivotek IB836B-HT Firmware<=0222g
Vivotek IB836B-HT Firmware
Vivotek FD816CA-HF2<=0222g
Vivotek FD816CA-HF2
Vivotek FD816C-HF2<=0222g
Vivotek FD816C-HF2 Firmware
Vivotek FE8182<=0222g
Vivotek Fe8182 Firmware
Vivotek FD8182-F1<=0222g
Vivotek FD8182-F1
Vivotek FD8182-F2<=0222g
Vivotek Fd8182-f2 Firmware
Vivotek FD8182-T<=0222g
Vivotek FD8182-T Firmware
Vivotek Fd8382-etv<=0222g
Vivotek Fd8382-etv Firmware
Vivotek FD8382-EVF2<=0222g
Vivotek Fd8382-vf2 Firmware
Vivotek FD8382-TV<=0222g
Vivotek FD8382-TV
Vivotek FD8382-VF2<=0222g
Vivotek Fd8382-tv Firmware
Vivotek IB8382-F3 Firmware<=0222g
Vivotek IB8382-F3 Firmware
Vivotek IB8382-ET<=0222g
Vivotek IB8382-ET
Vivotek IB8382-F3<=0222g
Vivotek IB8382-T Firmware
Vivotek IB8382-RF3 Firmware<=0222g
Vivotek IB8382-RF3 Firmware
Vivotek IB8382-RT<=0222g
Vivotek IB8382-T Firmware
Vivotek IB8382-T<=0222g
Vivotek IB8382-T Firmware
Vivotek FD8366-V<=0222g
Vivotek FD8366-V Firmware
Vivotek IB8367A Firmware<=0222g
Vivotek IB8367A Firmware
Vivotek IB8369A Firmware<=0222g
Vivotek IB8369A Firmware
Vivotek IP8166 Firmware<=0222g
Vivotek IP8166 Firmware
Vivotek MD8563-DEH<=0222g
Vivotek MD8563-DEH Firmware
Vivotek MD8563-EH<=0222g
Vivotek Md8563-eh Firmware
Vivotek Md8563-eh Firmware<=0222g
Vivotek Md8563-eh Firmware
Vivotek MD8565-N<=0222g
Vivotek MD8565-N
Vivotek VC8101 Firmware<=0222g
Vivotek VC8101 Firmware
Vivotek VS8100-v2<=0222g
Vivotek VS8100-v2
Vivotek IP8160 Firmware<=0222g
Vivotek IP8160 Firmware
Vivotek IP8160 Firmware<=0222g
Vivotek IP8160 Firmware
Vivotek IB8360-W Firmware<=0222g
Vivotek IB8360-W
Vivotek IB8360-W Firmware<=0222g
Vivotek IB8360-W Firmware
Vivotek IP9171-HP Firmware<=0222g
Vivotek IP9171-HP Firmware
Vivotek IP9181-H Firmware<=0222g
Vivotek IP9181-H Firmware
Vivotek Fd9371-(e)htv Firmware<=0222g
Vivotek Fd9371-(e)htv
Vivotek Fd9381-(e)htv Firmware<=0222g
Vivotek Fd9381-(e)htv
Vivotek IB9371-eHT Firmware<=0222g
Vivotek IB9371-eHT
Vivotek IB9381-(e)HT Firmware<=0222g
Vivotek IB9381-(E)HT
Vivotek FD9171-HT<=0222g
Vivotek Fd9171-ht Firmware
Vivotek Fd9181-ht Firmware<=0222g
Vivotek Fd9181-ht Firmware
Vivotek FE9181-H<=0222g
Vivotek Fe9181-h Firmware
Vivotek Fe9182-h Firmware<=0222g
Vivotek Fe9182-h Firmware
Vivotek Fe9381-ehv<=0222g
Vivotek Fe9381-ehv Firmware
Vivotek Fe9382-ehv<=0222g
Vivotek Fe9382-ehv Firmware
Vivotek FE9180-H Firmware<=0222g
Vivotek FE9180-H Firmware
Vivotek Fe9582-ehnv<=0222g
Vivotek Fe9582-ehnv Firmware
Vivotek SD9161-H Firmware<=0222g
Vivotek SD9161-H Firmware
Vivotek SD9361-EHL<=0222g
Vivotek SD9361-EHL
Vivotek SD9362-EHL Firmware<=0222g
Vivotek SD9362-EHL
Vivotek SD9362-EH-V2<=0222g
Vivotek Sd9362-eh Firmware
Vivotek Sd9363-ehl-v2 Firmware<=0222g
Vivotek Sd9363-ehl-v2 Firmware
Vivotek SD9364-EH<=0222g
Vivotek SD9364-EH
Vivotek SD9364-EHL Firmware<=0222g
Vivotek SD9364-EHL Firmware
Vivotek Sd9363-ehl-v2 Firmware<=0222g
Vivotek SD9363-EHL-V2
Vivotek SD9364-EHL-V2 Firmware<=0222g
Vivotek SD9364-EHL-V2
Vivotek SD9362-EH V2 Firmware<=0222g
Vivotek SD9362-EH V2 Firmware
Vivotek Sd9364-eh-v2<=0222g
Vivotek Sd9364-eh-v2 Firmware
Vivotek SD9366-EH-V2 Firmware<=0222g
Vivotek SD9366-EH-V2 Firmware
Vivotek SD9366-EHL Firmware<=0222g
Vivotek SD9366-EHL Firmware
Vivotek Sd9366-eh Firmware<=0222g
Vivotek SD9366-EH
Vivotek Sd9365-ehl Firmware<=0222g
Vivotek Sd9365-ehl Firmware
Vivotek Iz9361-eh<=0222g
Vivotek Iz9361-eh
Vivotek FD9187-H Firmware<=0222g
Vivotek FD9187-H Firmware
Vivotek Fd9187-ht Firmware<=0222g
Vivotek FD9187-HT
Vivotek FD9387-EHTV-A Firmware<=0222g
Vivotek Fd9387-ehtv Firmware
Vivotek FD9387-EHV<=0222g
Vivotek FD9387-EHV
Vivotek Fd9387-htv Firmware<=0222g
Vivotek Fd9387-htv Firmware
Vivotek Fd9387-hv<=0222g
Vivotek Fd9387-hv Firmware
Vivotek IB9387-EH<=0222g
Vivotek IB9387-EH
Vivotek Ib9387-eht-a Firmware<=0222g
Vivotek IB9387-EHT
Vivotek IB9387-H Firmware<=0222g
Vivotek IB9387-H
Vivotek Ib9387-ht Firmware<=0222g
Vivotek IB9387-HT
Vivotek Fd9189-hm Firmware<=0222g
Vivotek Fd9189-hm Firmware
Vivotek FD9189-HM<=0222g
Vivotek Fd9189-hm Firmware
Vivotek Fd9189-ht Firmware<=0222g
Vivotek FD9189-HT
Vivotek Fd9389-hv Firmware<=0222g
Vivotek Fd9389-hv Firmware
Vivotek FD9389-HMV<=0222g
Vivotek FD9389-HMV
Vivotek FD9389-EHTV Firmware<=0222g
Vivotek FD9389-EHTV Firmware
Vivotek Fd9389-ehv Firmware<=0222g
Vivotek Fd9389-ehv Firmware
Vivotek FD9389-EHTV Firmware<=0222g
Vivotek FD9389-EHTV Firmware
Vivotek FD9389-EHV<=0222g
Vivotek FD9389-EHV
Vivotek IB9389-EH Firmware<=0222g
Vivotek IB9389-EH Firmware
Vivotek IB9389-EHM<=0222g
Vivotek Ib9389-ehm Firmware
Vivotek IB9389-EHT Firmware<=0222g
Vivotek IB9389-EHT Firmware
Vivotek IB9389-H Firmware<=0222g
Vivotek IT9389-H
Vivotek Ib9389-hm Firmware<=0222g
Vivotek Ib9389-hm Firmware
Vivotek IB9389-HT Firmware<=0222g
Vivotek IB9389-HT Firmware
Vivotek Fd9165-ht Firmware<=0222g
Vivotek FD9165-HT-A
Vivotek Fd9365-ehtv Firmware<=0222g
Vivotek Fd9365-ehtv Firmware
Vivotek Fd9365-htv Firmware<=0222g
Vivotek Fd9365-htv-a Firmware
Vivotek FD9365-HTVL<=0222g
Vivotek FD9365-HTVL
Vivotek IB9365-HT-A Firmware<=0222g
Vivotek IB9365-HT-A Firmware
Vivotek IB9365-EHT<=0222g
Vivotek IB9365-EHT
Vivotek Ip9165-hp<=0222g
Vivotek IP9165-HP Firmware
Vivotek IP9165-HT Firmware<=0222g
Vivotek IP9165-HT Firmware
Vivotek IP9165-LPC (i-CS Kit) Firmware<=0222g
Vivotek IP9165-LPC (I-CS Kit)
Vivotek Fd9391-ehtv Firmware<=0222g
Vivotek FD9391-EHTV
Vivotek FE9191<=0222g
Vivotek Fe9191 Firmware
Vivotek IP9191-HP Firmware<=0222g
Vivotek IP9191-HP Firmware
Vivotek IP9191-HT Firmware<=0222g
Vivotek IP9191-HT Firmware
Vivotek Fe9391-ev Firmware<=0222g
Vivotek Fe9391-ev Firmware
Vivotek IB9391-EHT<=0222g
Vivotek IB9391-EHT
Vivotek IP9172-LPC Firmware<=0222g
Vivotek IP9172-LPC
Vivotek It9389-h Firmware<=0222g
Vivotek It9389-h Firmware
Vivotek It9389-ht Firmware<=0222g
Vivotek IT9389-HT
Vivotek MD9561-H<=0222g
Vivotek MD9561-H
Vivotek MD9581-H Firmware<=0222g
Vivotek MD9581-H Firmware
Vivotek Ms9390-hv Firmware<=0222g
Vivotek Ms9390-hv Firmware
Vivotek TB9330-E Firmware<=0222g
Vivotek TB9330-E
Vivotek Tb9331-e Firmware<=0222g
Vivotek TB9331-E
Vivotek SD9374-EHL Firmware<=0222g
Vivotek SD9374-EHL
Vivotek FD9167-H<=0222g
Vivotek FD9167-H Firmware
Vivotek FD9167-H<=0222g
Vivotek FD9167-HT Firmware
Vivotek FD9367-EHTV<=0222g
Vivotek FD9367-EHTV
Vivotek Fd9367-htv (epoc) Firmware<=0222g
Vivotek FD9367-HTV (Epoc) Firmware
Vivotek Fd9367-hv Firmware<=0222g
Vivotek Fd9367-hv Firmware
Vivotek Fd9367-htv (epoc) Firmware<=0222g
Vivotek FD9367-HTV (EPoC)
Vivotek Ib9367-eh Firmware<=0222g
Vivotek IB9367-EH
Vivotek Ib9367-eh Firmware<=0222g
Vivotek Ib9367-eh Firmware
Vivotek IB9367-H Firmware<=0222g
Vivotek IB9367-H Firmware
Vivotek IB9367-H Firmware<=0222g
Vivotek IB9367-HT Firmware
Vivotek Ip9167-hp Firmware<=0222g
Vivotek Ip9167-hp Firmware
Vivotek IP9167-HT Firmware<=0222g
Vivotek IP9167-HT
Vivotek Ma9321-ehtv Firmware<=0222g
Vivotek Ma9321-ehtv Firmware
Vivotek Ms9321-ehv Firmware<=0222g
Vivotek MS9321-EHV
Vivotek MA9322-EHTV Firmware<=0222g
Vivotek MA9322-EHTV Firmware
Vivotek FD8177-H Firmware<=0222g
Vivotek FD8177-HT
Vivotek FD8377-HV<=0222g
Vivotek FD8377-HV Firmware
Vivotek FD8177-H Firmware<=0222g
Vivotek Fd8177-ht Firmware
Vivotek Fd8377-ehtv Firmware<=0222g
Vivotek FD8377-EHTV
Vivotek Fd8377-htv Firmware<=0222g
Vivotek Fd8377-htv Firmware
Vivotek FD8179-H<=0222g
Vivotek Fd8179-h Firmware
Vivotek FD8379-HV Firmware<=0222g
Vivotek FD8379-HV Firmware
Vivotek IB8377-HT<=0222g
Vivotek IB8377-HT
Vivotek IB8379-H<=0222g
Vivotek IB8379-H
Vivotek IB8377-HT<=0222g
Vivotek IB8377-HT
Vivotek IB8377-EHT<=0222g
Vivotek IB8377-EHT Firmware
Vivotek Fd9165-ht-a Firmware<=0222g
Vivotek FD9165-HT
Vivotek Fd9365-htv-a Firmware<=0222g
Vivotek Fd9365-htv-a Firmware
Vivotek Fd9365-htv-a Firmware<=0222g
Vivotek Fd9365-ehtv-a Firmware
Vivotek Fd9187-ht-a<=0222g
Vivotek Fd9187-ht Firmware
Vivotek Fd9387-htv Firmware<=0222g
Vivotek Fd9387-htv-a Firmware
Vivotek FD9387-EHTV<=0222g
Vivotek FD9387-EHTV
Vivotek IB9365-EHT-A Firmware<=0222g
Vivotek IB9365-EHT-A Firmware
Vivotek IB9365-HT-A Firmware<=0222g
Vivotek IB9365-HT-A
Vivotek Ib9387-eht-a Firmware<=0222g
Vivotek Ib9387-eht-a Firmware
Vivotek IB9387-HT-A Firmware<=0222g
Vivotek IB9387-HT-A Firmware
Vivotek IP9164-HT Firmware<=0222g
Vivotek IP9164-HT Firmware
Vivotek IP9164-LPC Firmware<=0222g
Vivotek IP9164-LPC Firmware
Vivotek IP9165-LPC (i-CS Kit) Firmware<=0222g
Vivotek IP9165-LPC (I-CS Kit)

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2020-11950?

    CVE-2020-11950 has a CVSS score that indicates a high severity due to the potential for remote code execution.

  • How do I fix CVE-2020-11950?

    To fix CVE-2020-11950, update to the firmware versions XXXXX-VVTK-2.2002.xx.01x or later for affected VIVOTEK Network Cameras.

  • Which devices are affected by CVE-2020-11950?

    CVE-2020-11950 affects various VIVOTEK Network Cameras, particularly IT9388-HT devices with older firmware versions.

  • Can I exploit CVE-2020-11950 remotely?

    Yes, CVE-2020-11950 can be exploited by authenticated users to upload and execute scripts on the affected devices.

  • What type of vulnerability is CVE-2020-11950?

    CVE-2020-11950 is a vulnerability that allows authenticated users to upload malicious scripts, leading to arbitrary code execution.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203