What’s Vulnerable › Vulnerabilities

CVE-2018-14770

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-09-05 · updated 2026-06-17

Description

VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service).

Affected products

• Vivotek Camera: all versions

References

• http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-003-v1.pdf
• https://www.vivotek.com/website/support/cybersecurity/
• http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-003-v1.pdf
• https://www.vivotek.com/website/support/cybersecurity/

Get alerted when CVE-2018-14770 or the next vulnerability affects your stack