Vivotek Network Camera FD816BA Firmware vulnerabilities

2 CVEs affecting Vivotek Network Camera FD816BA Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-9829, published 2017-06-23.

More from Vivotek.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-9828, published 2017-06-23. Critical severity, CVSS 9.8. EPSS: 82.5% chance of exploitation in the next 30 days. '/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any shell command as root…
• CVE-2017-9829, published 2017-06-23. High severity, CVSS 7.5. EPSS: 68.7% chance of exploitation in the next 30 days. '/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers to read any file on the camera's Linux filesystem via a…