Количество 3
Количество 3
CVE-2017-9828
'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any shell command as root via a crafted HTTP request. This vulnerability is already verified on VIVOTEK Network Camera IB8369/FD8164/FD816BA; most others have similar firmware that may be affected. An attack uses shell metacharacters in the senderemail parameter.
GHSA-mcp7-747p-3h68
'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any shell command as root via a crafted HTTP request. This vulnerability is already verified on VIVOTEK Network Camera IB8369/FD8164/FD816BA; most others have similar firmware that may be affected. An attack uses shell metacharacters in the senderemail parameter.
BDU:2017-01866
Уязвимость в /cgi-bin/admin/testserver.cgi' веб-службы микропрограммного обеспечения сетевых камер видеонаблюдения Network Camera IB8369, FD8164 и FD816BA, позволяющая нарушителю выполнить любую команду shell с правами суперпользователя
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-9828 '/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any shell command as root via a crafted HTTP request. This vulnerability is already verified on VIVOTEK Network Camera IB8369/FD8164/FD816BA; most others have similar firmware that may be affected. An attack uses shell metacharacters in the senderemail parameter. | CVSS3: 9.8 | 58% Средний | больше 8 лет назад |
| GHSA-mcp7-747p-3h68 '/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any shell command as root via a crafted HTTP request. This vulnerability is already verified on VIVOTEK Network Camera IB8369/FD8164/FD816BA; most others have similar firmware that may be affected. An attack uses shell metacharacters in the senderemail parameter. | CVSS3: 9.8 | 58% Средний | больше 3 лет назад |
 | BDU:2017-01866 Уязвимость в /cgi-bin/admin/testserver.cgi' веб-службы микропрограммного обеспечения сетевых камер видеонаблюдения Network Camera IB8369, FD8164 и FD816BA, позволяющая нарушителю выполнить любую команду shell с правами суперпользователя | CVSS2: 10 | 58% Средний | больше 8 лет назад |
Уязвимостей на страницу