Remote Command Injection Vulnerability in Vivotek FD8136 Devices

CVE-2018-14495

What is CVE-2018-14495?

Vivotek FD8136 devices are susceptible to a remote command injection vulnerability that allows attackers to execute arbitrary commands on the device. This issue can be exploited to compromise the integrity of the device by sending specially crafted requests. The vendor has disputed the classification of this issue as a vulnerability, arguing that it does not lead to a crash or performance degradation. However, the potential for exploitation raises concerns about the security of Vivotek FD8136 devices in an IoT environment.

References