File Disclosure Vulnerability in VIVOTEK Network Cameras
CVE-2020-11949

6.5MEDIUM

Key Information:

Vendor

Vivotek

Status
Cc9381-hv Firmware
Vendor
CVE Published:
28 May 2020

What is CVE-2020-11949?

The testserver.cgi of the VIVOTEK Network Cameras allows authenticated users to access arbitrary files on the camera's local filesystem. This vulnerability can potentially lead to unauthorized access to sensitive information stored within the device, impacting the security and privacy of users relying on these cameras for surveillance.

References

http://download.vivotek.com/downloadfile/support/cyber-se...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.