CVE-2020-11950: OS Command Injection
Published May 28, 2020
·Updated
VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXXBeta2) allows an authenticated user to upload and execute a script (with resultant execution of OS commands). For example, this affects IT9388-HT devices.
Affected Software
400 affected components
Vivotek Cc9381-hv Firmware<=0222g
Vivotek Cc9381-hv
Vivotek Fd9360-h Firmware<=0222g
Vivotek Fd9360-h
Vivotek Fd9368-htv Firmware<=0222g
Vivotek Fd9368-htv
Vivotek Fd9380-h Firmware<=0222g
Vivotek Fd9380-h
Vivotek Fd9388-htv Firmware<=0222g
Vivotek Fd9388-htv
Vivotek Ib9360-h Firmware<=0222g
Vivotek Ib9360-h
Vivotek Ib9368-ht Firmware<=0222g
Vivotek Ib9368-ht
Vivotek Ib9380-h Firmware<=0222g
Vivotek Ib9380-h
Vivotek Ib9388-ht Firmware<=0222g
Vivotek Ib9388-ht
Vivotek It9360-h Firmware<=0222g
Vivotek It9360-h
Vivotek It9380-h Firmware<=0222g
Vivotek It9380-h
Vivotek It9388-ht Firmware<=0222g
Vivotek IT9388-HT
Vivotek Md9560-dh Firmware<=0222g
Vivotek Md9560-dh
Vivotek Md9560-h Firmware<=0222g
Vivotek Md9560-h
Vivotek Fd9366-hv Firmware<=0222g
Vivotek Fd9366-hv
Vivotek Fd9166-hn Firmware<=0222g
Vivotek Fd9166-hn
Vivotek Fe9380-hv Firmware<=0222g
Vivotek Fe9380-hv
Vivotek Cc8160 Firmware<=0222g
Vivotek CC8160
Vivotek Cc8160\(hs\) Firmware<=0222g
Vivotek Cc8160\(hs\)
Vivotek Cc8370-hv Firmware<=0222g
Vivotek Cc8370-hv
Vivotek Cc8371-hv Firmware<=0222g
Vivotek Cc8371-hv
Vivotek Cd8371-hntv Firmware<=0222g
Vivotek Cd8371-hntv
Vivotek Cd8371-hnvf2 Firmware<=0222g
Vivotek Cd8371-hnvf2
Vivotek Fd8166a Firmware<=0222g
Vivotek Fd8166a
Vivotek Fd8166a-n Firmware<=0222g
Vivotek Fd8166a-n
Vivotek Fd8167a Firmware<=0222g
Vivotek Fd8167a
Vivotek Fd8167a-s Firmware<=0222g
Vivotek Fd8167a-s
Vivotek Fd8169a Firmware<=0222g
Vivotek Fd8169a
Vivotek Fd8169a-s Firmware<=0222g
Vivotek Fd8169a-s
Vivotek Fd8367a-v Firmware<=0222g
Vivotek Fd8367a-v
Vivotek Fd8369a-v Firmware<=0222g
Vivotek Fd8369a-v
Vivotek Fd816ba-hf2 Firmware<=0222g
Vivotek Fd816ba-hf2
Vivotek Fd836ba-hvf2 Firmware<=0222g
Vivotek Fd836ba-hvf2
Vivotek Fd836ba-htv Firmware<=0222g
Vivotek Fd836ba-htv
Vivotek Fd836ba-ehvf2 Firmware<=0222g
Vivotek Fd836ba-ehvf2
Vivotek Fd816ba-ht Firmware<=0222g
Vivotek Fd816ba-ht
Vivotek Fd836ba-ehtv Firmware<=0222g
Vivotek Fd836ba-ehtv
Vivotek Ib836ba-ehf3 Firmware<=0222g
Vivotek Ib836ba-ehf3
Vivotek Ib836ba-eht Firmware<=0222g
Vivotek Ib836ba-eht
Vivotek Ib836ba-hf3 Firmware<=0222g
Vivotek Ib836ba-hf3
Vivotek Ib836ba-ht Firmware<=0222g
Vivotek Ib836ba-ht
Vivotek Fd816b-hf2 Firmware<=0222g
Vivotek Fd816b-hf2
Vivotek Fd816b-ht Firmware<=0222g
Vivotek Fd816b-ht
Vivotek Fd836b-ehtv Firmware<=0222g
Vivotek Fd836b-ehtv
Vivotek Fd836b-ehvf2 Firmware<=0222g
Vivotek Fd836b-ehvf2
Vivotek Fd836b-htv Firmware<=0222g
Vivotek Fd836b-htv
Vivotek Fd836b-hvf2 Firmware<=0222g
Vivotek Fd836b-hvf2
Vivotek Ib836b-ehf3 Firmware<=0222g
Vivotek Ib836b-ehf3
Vivotek Ib836b-eht Firmware<=0222g
Vivotek Ib836b-eht
Vivotek Ib836b-hf3 Firmware<=0222g
Vivotek Ib836b-hf3
Vivotek Ib836b-hrf3 Firmware<=0222g
Vivotek Ib836b-hrf3
Vivotek Ib836b-ht Firmware<=0222g
Vivotek Ib836b-ht
Vivotek Fd816ca-hf2 Firmware<=0222g
Vivotek Fd816ca-hf2
Vivotek Fd816c-hf2 Firmware<=0222g
Vivotek Fd816c-hf2
Vivotek Fe8182 Firmware<=0222g
Vivotek Fe8182
Vivotek Fd8182-f1 Firmware<=0222g
Vivotek Fd8182-f1
Vivotek Fd8182-f2 Firmware<=0222g
Vivotek Fd8182-f2
Vivotek Fd8182-t Firmware<=0222g
Vivotek Fd8182-t
Vivotek Fd8382-etv Firmware<=0222g
Vivotek Fd8382-etv
Vivotek Fd8382-evf2 Firmware<=0222g
Vivotek Fd8382-evf2
Vivotek Fd8382-tv Firmware<=0222g
Vivotek Fd8382-tv
Vivotek Fd8382-vf2 Firmware<=0222g
Vivotek Fd8382-vf2
Vivotek Ib8382-ef3 Firmware<=0222g
Vivotek Ib8382-ef3
Vivotek Ib8382-et Firmware<=0222g
Vivotek Ib8382-et
Vivotek Ib8382-f3 Firmware<=0222g
Vivotek Ib8382-f3
Vivotek Ib8382-rf3 Firmware<=0222g
Vivotek Ib8382-rf3
Vivotek Ib8382-rt Firmware<=0222g
Vivotek Ib8382-rt
Vivotek Ib8382-t Firmware<=0222g
Vivotek Ib8382-t
Vivotek Fd8366-v Firmware<=0222g
Vivotek Fd8366-v
Vivotek Ib8367a Firmware<=0222g
Vivotek IB8367A
Vivotek Ib8369a Firmware<=0222g
Vivotek Ib8369a
Vivotek Ip8166 Firmware<=0222g
Vivotek Ip8166
Vivotek Md8563-deh Firmware<=0222g
Vivotek Md8563-deh
Vivotek Md8563-eh Firmware<=0222g
Vivotek Md8563-eh
Vivotek Md8564-eh Firmware<=0222g
Vivotek Md8564-eh
Vivotek Md8565-n Firmware<=0222g
Vivotek Md8565-n
Vivotek Vc8101 Firmware<=0222g
Vivotek Vc8101
Vivotek Vs8100-v2 Firmware<=0222g
Vivotek Vs8100-v2
Vivotek Ip8160 Firmware<=0222g
Vivotek Ip8160
Vivotek Ip8160-w Firmware<=0222g
Vivotek Ip8160-w
Vivotek Ib8360 Firmware<=0222g
Vivotek Ib8360
Vivotek Ib8360-w Firmware<=0222g
Vivotek Ib8360-w
Vivotek Ip9171-hp Firmware<=0222g
Vivotek Ip9171-hp
Vivotek Ip9181-h Firmware<=0222g
Vivotek Ip9181-h
Vivotek Fd9371-\(e\)htv Firmware<=0222g
Vivotek Fd9371-\(e\)htv
Vivotek Fd9381-\(e\)htv Firmware<=0222g
Vivotek Fd9381-\(e\)htv
Vivotek Ib9371-\(e\)ht Firmware<=0222g
Vivotek Ib9371-\(e\)ht
Vivotek Ib9381-\(e\)ht Firmware<=0222g
Vivotek Ib9381-\(e\)ht
Vivotek Fd9171-ht Firmware<=0222g
Vivotek Fd9171-ht
Vivotek Fd9181-ht Firmware<=0222g
Vivotek Fd9181-ht
Vivotek Fe9181-h Firmware<=0222g
Vivotek Fe9181-h
Vivotek Fe9182-h Firmware<=0222g
Vivotek Fe9182-h
Vivotek Fe9381-ehv Firmware<=0222g
Vivotek Fe9381-ehv
Vivotek Fe9382-ehv Firmware<=0222g
Vivotek Fe9382-ehv
Vivotek Fe9180-h Firmware<=0222g
Vivotek Fe9180-h
Vivotek Fe9582-ehnv Firmware<=0222g
Vivotek Fe9582-ehnv
Vivotek Sd9161-h Firmware<=0222g
Vivotek Sd9161-h
Vivotek Sd9361-ehl Firmware<=0222g
Vivotek Sd9361-ehl
Vivotek Sd9362-ehl Firmware<=0222g
Vivotek Sd9362-ehl
Vivotek Sd9362-eh Firmware<=0222g
Vivotek Sd9362-eh
Vivotek Sd9363-ehl Firmware<=0222g
Vivotek Sd9363-ehl
Vivotek Sd9364-eh Firmware<=0222g
Vivotek Sd9364-eh
Vivotek Sd9364-ehl Firmware<=0222g
Vivotek Sd9364-ehl
Vivotek Sd9363-ehl-v2 Firmware<=0222g
Vivotek Sd9363-ehl-v2
Vivotek Sd9364-ehl-v2 Firmware<=0222g
Vivotek Sd9364-ehl-v2
Vivotek Sd9362-eh-v2 Firmware<=0222g
Vivotek Sd9362-eh-v2
Vivotek Sd9364-eh-v2 Firmware<=0222g
Vivotek Sd9364-eh-v2
Vivotek Sd9366-eh-v2 Firmware<=0222g
Vivotek Sd9366-eh-v2
Vivotek Sd9366-ehl Firmware<=0222g
Vivotek Sd9366-ehl
Vivotek Sd9366-eh Firmware<=0222g
Vivotek Sd9366-eh
Vivotek Sd9365-ehl Firmware<=0222g
Vivotek Sd9365-ehl
Vivotek Iz9361-eh Firmware<=0222g
Vivotek Iz9361-eh
Vivotek Fd9187-h Firmware<=0222g
Vivotek Fd9187-h
Vivotek Fd9187-ht Firmware<=0222g
Vivotek Fd9187-ht
Vivotek Fd9387-ehtv Firmware<=0222g
Vivotek Fd9387-ehtv
Vivotek Fd9387-ehv Firmware<=0222g
Vivotek Fd9387-ehv
Vivotek Fd9387-htv Firmware<=0222g
Vivotek Fd9387-htv
Vivotek Fd9387-hv Firmware<=0222g
Vivotek Fd9387-hv
Vivotek Ib9387-eh Firmware<=0222g
Vivotek Ib9387-eh
Vivotek Ib9387-eht Firmware<=0222g
Vivotek Ib9387-eht
Vivotek Ib9387-h Firmware<=0222g
Vivotek Ib9387-h
Vivotek Ib9387-ht Firmware<=0222g
Vivotek Ib9387-ht
Vivotek Fd9189-h Firmware<=0222g
Vivotek Fd9189-h
Vivotek Fd9189-hm Firmware<=0222g
Vivotek Fd9189-hm
Vivotek Fd9189-ht Firmware<=0222g
Vivotek Fd9189-ht
Vivotek Fd9389-hv Firmware<=0222g
Vivotek Fd9389-hv
Vivotek Fd9389-hmv Firmware<=0222g
Vivotek Fd9389-hmv
Vivotek Fd9389-htv Firmware<=0222g
Vivotek Fd9389-htv
Vivotek Fd9389-ehmv Firmware<=0222g
Vivotek Fd9389-ehmv
Vivotek Fd9389-ehtv Firmware<=0222g
Vivotek Fd9389-ehtv
Vivotek Fd9389-ehv Firmware<=0222g
Vivotek Fd9389-ehv
Vivotek Ib9389-eh Firmware<=0222g
Vivotek Ib9389-eh
Vivotek Ib9389-ehm Firmware<=0222g
Vivotek Ib9389-ehm
Vivotek Ib9389-eht Firmware<=0222g
Vivotek Ib9389-eht
Vivotek Ib9389-h Firmware<=0222g
Vivotek Ib9389-h
Vivotek Ib9389-hm Firmware<=0222g
Vivotek Ib9389-hm
Vivotek Ib9389-ht Firmware<=0222g
Vivotek Ib9389-ht
Vivotek Fd9165-ht Firmware<=0222g
Vivotek Fd9165-ht
Vivotek Fd9365-ehtv Firmware<=0222g
Vivotek Fd9365-ehtv
Vivotek Fd9365-htv Firmware<=0222g
Vivotek Fd9365-htv
Vivotek Fd9365-htvl Firmware<=0222g
Vivotek Fd9365-htvl
Vivotek Ib9365-ht Firmware<=0222g
Vivotek Ib9365-ht
Vivotek Ib9365-eht Firmware<=0222g
Vivotek Ib9365-eht
Vivotek Ip9165-hp Firmware<=0222g
Vivotek Ip9165-hp
Vivotek Ip9165-ht Firmware<=0222g
Vivotek Ip9165-ht
Vivotek Ip9165-lpc Firmware<=0222g
Vivotek Ip9165-lpc
Vivotek Fd9391-ehtv Firmware<=0222g
Vivotek Fd9391-ehtv
Vivotek Fe9191 Firmware<=0222g
Vivotek Fe9191
Vivotek Ip9191-hp Firmware<=0222g
Vivotek Ip9191-hp
Vivotek Ip9191-ht Firmware<=0222g
Vivotek Ip9191-ht
Vivotek Fe9391-ev Firmware<=0222g
Vivotek Fe9391-ev
Vivotek Ib9391-eht Firmware<=0222g
Vivotek Ib9391-eht
Vivotek Ip9172-lpc Firmware<=0222g
Vivotek Ip9172-lpc
Vivotek It9389-h Firmware<=0222g
Vivotek It9389-h
Vivotek It9389-ht Firmware<=0222g
Vivotek It9389-ht
Vivotek Md9561-h Firmware<=0222g
Vivotek Md9561-h
Vivotek Md9581-h Firmware<=0222g
Vivotek Md9581-h
Vivotek Ms9390-hv Firmware<=0222g
Vivotek Ms9390-hv
Vivotek Tb9330-e Firmware<=0222g
Vivotek Tb9330-e
Vivotek Tb9331-e Firmware<=0222g
Vivotek Tb9331-e
Vivotek Sd9374-ehl\(x\) Firmware<=0222g
Vivotek Sd9374-ehl\(x\)
Vivotek Fd9167-h Firmware<=0222g
Vivotek Fd9167-h
Vivotek Fd9167-ht Firmware<=0222g
Vivotek Fd9167-ht
Vivotek Fd9367-ehtv Firmware<=0222g
Vivotek Fd9367-ehtv
Vivotek Fd9367-htv Firmware<=0222g
Vivotek Fd9367-htv
Vivotek Fd9367-hv Firmware<=0222g
Vivotek Fd9367-hv
Vivotek Fd9367-htv\(epoc\) Firmware<=0222g
Vivotek Fd9367-htv\(epoc\)
Vivotek Ib9367-eh Firmware<=0222g
Vivotek Ib9367-eh
Vivotek Ib9367-eht Firmware<=0222g
Vivotek Ib9367-eht
Vivotek Ib9367-h Firmware<=0222g
Vivotek Ib9367-h
Vivotek Ib9367-ht Firmware<=0222g
Vivotek Ib9367-ht
Vivotek Ip9167-hp Firmware<=0222g
Vivotek Ip9167-hp
Vivotek Ip9167-ht Firmware<=0222g
Vivotek Ip9167-ht
Vivotek Ma9321-ehtv Firmware<=0222g
Vivotek Ma9321-ehtv
Vivotek Ms9321-ehv Firmware<=0222g
Vivotek Ms9321-ehv
Vivotek Ma9322-ehtv Firmware<=0222g
Vivotek Ma9322-ehtv
Vivotek Fd8177-h Firmware<=0222g
Vivotek Fd8177-h
Vivotek Fd8377-hv Firmware<=0222g
Vivotek Fd8377-hv
Vivotek Fd8177-ht Firmware<=0222g
Vivotek Fd8177-ht
Vivotek Fd8377-ehtv Firmware<=0222g
Vivotek Fd8377-ehtv
Vivotek Fd8377-htv Firmware<=0222g
Vivotek Fd8377-htv
Vivotek Fd8179-h Firmware<=0222g
Vivotek Fd8179-h
Vivotek Fd8379-hv Firmware<=0222g
Vivotek Fd8379-hv
Vivotek Ib8377-h Firmware<=0222g
Vivotek Ib8377-h
Vivotek Ib8379-h Firmware<=0222g
Vivotek Ib8379-h
Vivotek Ib8377-ht Firmware<=0222g
Vivotek Ib8377-ht
Vivotek Ib8377-eht Firmware<=0222g
Vivotek Ib8377-eht
Vivotek Fd9165-ht-a Firmware<=0222g
Vivotek Fd9165-ht-a
Vivotek Fd9365-htv-a Firmware<=0222g
Vivotek Fd9365-htv-a
Vivotek Fd9365-ehtv-a Firmware<=0222g
Vivotek Fd9365-ehtv-a
Vivotek Fd9187-ht-a Firmware<=0222g
Vivotek Fd9187-ht-a
Vivotek Fd9387-htv-a Firmware<=0222g
Vivotek Fd9387-htv-a
Vivotek Fd9387-ehtv-a Firmware<=0222g
Vivotek Fd9387-ehtv-a
Vivotek Ib9365-eht-a Firmware<=0222g
Vivotek Ib9365-eht-a
Vivotek Ib9365-ht-a Firmware<=0222g
Vivotek Ib9365-ht-a
Vivotek Ib9387-eht-a Firmware<=0222g
Vivotek Ib9387-eht-a
Vivotek Ib9387-ht-a Firmware<=0222g
Vivotek Ib9387-ht-a
Vivotek Ip9164-ht Firmware<=0222g
Vivotek Ip9164-ht
Vivotek Ip9164-lpc Firmware<=0222g
Vivotek Ip9164-lpc
Vivotek Ip9165-lpc\(i-cs Kit\) Firmware<=0222g
Vivotek Ip9165-lpc\(i-cs Kit\)
Event History
May 28, 2020
CVE Published
via MITRE·12:44 PM
Data Sourced
via MITRE·12:44 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-11950?
CVE-2020-11950 has a CVSS score that indicates a high severity due to the potential for remote code execution.
2
How do I fix CVE-2020-11950?
To fix CVE-2020-11950, update to the firmware versions XXXXX-VVTK-2.2002.xx.01x or later for affected VIVOTEK Network Cameras.
3
Which devices are affected by CVE-2020-11950?
CVE-2020-11950 affects various VIVOTEK Network Cameras, particularly IT9388-HT devices with older firmware versions.
4
Can I exploit CVE-2020-11950 remotely?
Yes, CVE-2020-11950 can be exploited by authenticated users to upload and execute scripts on the affected devices.
5
What type of vulnerability is CVE-2020-11950?
CVE-2020-11950 is a vulnerability that allows authenticated users to upload malicious scripts, leading to arbitrary code execution.