Описание
Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable arbitrary system services via a URL parameter.
Ссылки
- Vendor Advisory
- ExploitThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:h:vivotek:camera:-:*:*:*:*:*:*:*
EPSS
Процентиль: 45%
0.00228
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-862
Связанные уязвимости
CVSS3: 5.3
github
больше 3 лет назад
Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable arbitrary system services via a URL parameter.
EPSS
Процентиль: 45%
0.00228
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-862