What’s Vulnerable › Vulnerabilities
CVE-2020-11950
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-05-28 · updated 2026-06-17
- Weakness: CWE-78
Description
VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution of OS commands). For example, this affects IT9388-HT devices.
Affected products
- Vivotek Cc8160(Hs) Firmware: through 0222g
- Vivotek CC8160: through 0222g
- Vivotek Cc8370-Hv Firmware: through 0222g
- Vivotek Cc8371-Hv Firmware: through 0222g
- Vivotek Cc9381-Hv Firmware: through 0222g
- Vivotek Cd8371-Hntv Firmware: through 0222g
- Vivotek Cd8371-Hnvf2 Firmware: through 0222g
- Vivotek Fd8166A-N Firmware: through 0222g
- Vivotek Fd8166A Firmware: through 0222g
- Vivotek Fd8167A-S Firmware: through 0222g
- Vivotek Fd8167A Firmware: through 0222g
- Vivotek Fd8169A-S Firmware: through 0222g
- Vivotek Fd8169A Firmware: through 0222g
- Vivotek Fd816B-Hf2 Firmware: through 0222g
- Vivotek Fd816B-Ht Firmware: through 0222g
- Vivotek Fd816Ba-Hf2 Firmware: through 0222g
- Vivotek Fd816Ba-Ht Firmware: through 0222g
- Vivotek Fd816C-Hf2 Firmware: through 0222g
- Vivotek Fd816Ca-Hf2 Firmware: through 0222g
- Vivotek Fd8177-H Firmware: through 0222g
- Vivotek Fd8177-Ht Firmware: through 0222g
- Vivotek Fd8179-H Firmware: through 0222g
- Vivotek Fd8182-F1 Firmware: through 0222g
- Vivotek Fd8182-F2 Firmware: through 0222g
- Vivotek Fd8182-T Firmware: through 0222g
- Vivotek Fd8366-V Firmware: through 0222g
- Vivotek Fd8367A-V Firmware: through 0222g
- Vivotek Fd8369A-V Firmware: through 0222g
- Vivotek Fd836B-Ehtv Firmware: through 0222g
- Vivotek Fd836B-Ehvf2 Firmware: through 0222g
References
- http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2020-001-v1.pdf
- http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2020-001-v1.pdf
Get alerted when CVE-2020-11950 or the next vulnerability affects your stack