CVE-2018-14771 - VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi · CoreCVE

Back Back to CVE browser

HIGH

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi

Published Sep 5, 2018

8.8

HIGH

CVSS 3.0

EPSS 2.98%

Description

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-003-v1.pdf
x_refsource_CONFIRMMitigationVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-6657
Advisory
https://www.vivotek.com/website/support/cybersecurity/
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-003-v1.pdf		x_refsource_CONFIRMMitigationVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-6657		Advisory
https://www.vivotek.com/website/support/cybersecurity/		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 5, 2018

Updated Aug 5, 2024

Reserved Jul 31, 2018

Link CVE-2018-14771

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2018-14771

Severity n/a

Public date n/a

Links CVE-2018-14771

Assigner mitre

Published Sep 5, 2018

Updated Aug 5, 2024

Exploited since n/a

Link EUVD-2018-6657