CVE-2024-26548: Critical severity vivotek fd816ba firmware vulnerability
Published Feb 29, 2024
·Updated
An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the uploadfile.cgi component.
Affected Software
3 affected components
Vivotek Network Camera
All of the following
Vivotek Camera Firmware=v.fd8166a-vvtk-0204j
Vivotek Camera
Event History
Feb 29, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-26548?
CVE-2024-26548 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2024-26548?
To fix CVE-2024-26548, ensure that you are using the latest firmware version for the Vivotek FD8166A Network Camera.
3
What impact does CVE-2024-26548 have on Vivotek Network Cameras?
CVE-2024-26548 allows an attacker to execute arbitrary code, which can lead to unauthorized access and control of the camera.
4
Is CVE-2024-26548 exploitable remotely?
Yes, CVE-2024-26548 can be exploited remotely by sending crafted payloads to the upload_file.cgi component.
5
Are there any known exploits for CVE-2024-26548?
Yes, there are known exploits that target CVE-2024-26548, enabling attackers to take control of affected devices.