CVE-2017-9828: Vivotek Network Camera FD8164 Firmware

Critical severity, CVSS 9.8. EPSS: 82.5% chance of exploitation in the next 30 days.

'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any shell command as root via a crafted HTTP request. This vulnerability is already verified on VIVOTEK Network Camera IB8369/FD8164/FD816BA; most others have similar firmware that may be affected. An attack uses shell metacharacters in the senderemail parameter.

Affected products

• Vivotek Network Camera FD8164 Firmware: version fd8164-_vvtk-0200b only
• Vivotek Network Camera FD816BA Firmware: version fd816ba-vvtk-010101. only
• Vivotek Network Camera IB8369 Firmware: version ib8369-vvtk-0102a only

Published 2017-06-23. Last modified 2026-06-17.