CVE-2017-9829: Vivotek Network Camera FD8164 Firmware

High severity, CVSS 7.5. EPSS: 68.7% chance of exploitation in the next 30 days.

'/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers to read any file on the camera's Linux filesystem via a crafted HTTP request containing ".." sequences. This vulnerability is already verified on VIVOTEK Network Camera IB8369/FD8164/FD816BA; most others have similar firmware that may be affected.

Affected products

• Vivotek Network Camera FD8164 Firmware: version fd8164-_vvtk-0200b only
• Vivotek Network Camera FD816BA Firmware: version fd816ba-vvtk-010101. only
• Vivotek Network Camera IB8369 Firmware: version ib8369-vvtk-0102a only

Published 2017-06-23. Last modified 2026-06-17.