VI
Vendor
Vivotek
87 products with CVEs on record
179
CVEs
0
On KEV
0
New 30D
Products
CA
Camera
Vivotek
9.8
10 CVEs0 on KEV0 new
FF
Fd8136 Firmware
Vivotek
9.8
9 CVEs0 on KEV0 new
PF
Pt7135 Firmware
Vivotek
9.8
5 CVEs0 on KEV0 new
CF
Cc8160 Firmware
Vivotek
9.8
4 CVEs0 on KEV0 new
IP
IP7137
Vivotek
9.8
4 CVEs0 on KEV0 new
IF
Ip7137 Firmware
Vivotek
9.8
4 CVEs0 on KEV0 new
CC
CC8160
Vivotek
9.8
2 CVEs0 on KEV0 new
CF
Cc8160(hs) Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
CF
Cc8370-hv Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
CF
Cc8371-hv Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
CF
Cc9381-hv Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
CF
Cd8371-hntv Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
CF
Cd8371-hnvf2 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd8166a Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd8166a-n Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd8167a Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd8169a Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd816b-hf2 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd816b-ht Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd816ba-hf2 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd816ba-ht Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd816c-hf2 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd816ca-hf2 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd8182-f1 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd8182-f2 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd8182-t Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd8367a-v Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd8369a-v Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd836b-ehtv Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd836b-ehvf2 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd836b-htv Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd836b-hvf2 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd836ba-ehtv Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd836ba-ehvf2 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd836ba-htv Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd836ba-hvf2 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd8382-etv Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd8382-evf2 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd9166-hn Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd9360-h Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd9366-hv Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd9368-htv Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd9380-h Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fd9388-htv Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
FF
Fe9380-hv Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
Ib836b-ehf3 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
Ib836b-eht Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
Ib836b-hf3 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
Ib836b-hrf3 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
Ib836b-ht Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
Ib836ba-ehf3 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
Ib836ba-eht Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
Ib836ba-hf3 Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
Ib836ba-ht Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
Ib9360-h Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
Ib9368-ht Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
Ib9380-h Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
Ib9388-ht Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
It9360-h Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
IF
It9380-h Firmware
Vivotek
8.8
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-30652
FF
Fd8136 Firmware
Vivotek
8.8
1%
Jun 2A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a
CVE-2026-35718
FF
Fd8136 Firmware
Vivotek
6.5
1%
Jun 2A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device…
CVE-2026-35716
FF
Fd8136 Firmware
Vivotek
6.3
0%
Jun 2A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root…
CVE-2026-35717
FF
Fd8136 Firmware
Vivotek
6.3
0%
Jun 2A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as…
CVE-2026-30650
FF
Fd8136 Firmware
Vivotek
8.8
1%
Jun 2A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware…
CVE-2026-30649
FF
Fd8136 Firmware
Vivotek
7.3
0%
Jun 2Buffer Overflow vulnerability in VIVOTEK INC FD8136-VVTK-0300a allows a remote attacker to execute arbitrary code via the set_getparam.cgi component
CVE-2026-22755
AD
Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA
Vivotek
9.3
14%
Jan 13Legacy Vivotek Camera Firmware Command Injection in upload_map.cgi
CVE-2025-66052
IP
IP7137
Vivotek
7.2
1%
Jan 9Command injection in Vivotek IP7137 cameras
CVE-2025-66051
IP
IP7137
Vivotek
6.5
1%
Jan 9Path traversal in Vivotek IP7137 cameras
CVE-2025-66050
IP
IP7137
Vivotek
9.8
0%
Jan 9No password set for administrative account in Vivotek IP7137 cameras
CVE-2025-66049
IP
IP7137
Vivotek
7.5
0%
Jan 9Unprotected RTSP stream in Vivotek IP7137 cameras
CVE-2025-12592
AD
Affected device model numbers are FD7131-VVTK,FD7131-VVTK,FD7131-VVTK,FD7141-VVTK,IP7131-VVTK,IP7133-VVTK,IP7133-VVTK,IP7133-VVTK,IP7134-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7138-VVTK,IP7142-VVTK,IP7142-VVTK,IP
Vivotek
9.3
0%
Nov 19Use of default login credentials in Legacy Vivotek Devices
CVE-2025-3403
NN
NVR ND9525P
Vivotek
2.7
0%
Apr 8Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source
CVE-2024-7443
IB
IB8367A
Vivotek
9.8
3%
Aug 3Vivotek IB8367A upload_file.cgi getenv command injection
CVE-2024-7442
SD
SD9364
Vivotek
9.8
3%
Aug 3Vivotek SD9364 upload_file.cgi getenv command injection
CVE-2024-7441
SD
SD9364
Vivotek
9.8
8%
Aug 3Vivotek SD9364 httpd read stack-based overflow
CVE-2024-7440
CC
CC8160
Vivotek
9.8
3%
Aug 3Vivotek CC8160 upload_file.cgi getenv command injection
CVE-2024-7439
CC
CC8160
Vivotek
9.8
1%
Aug 3Vivotek CC8160 httpd read stack-based overflow
CVE-2024-26548
CF
Camera Firmware
Vivotek
9.8
1%
Feb 29An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the upload_file.cgi component
CVE-2020-11950
FF
Fd8166a-n Firmware
Vivotek
8.8
3%
May 28VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution…
CVE-2020-11949
FF
Fd8369a-v Firmware
Vivotek
6.5
1%
May 28testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary…
CVE-2013-1598
PF
Pt7135 Firmware
Vivotek
8.8
20%
Jan 24A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, which cold let a malicious user…
CVE-2013-1597
PF
Pt7135 Firmware
Vivotek
6.5
14%
Jan 24A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malicious user obtain user…
CVE-2013-1596
PF
Pt7135 Firmware
Vivotek
5.3
10%
Jan 24An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554
CVE-2013-1595
PF
Pt7135 Firmware
Vivotek
9.8
42%
Jan 24A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which…
CVE-2013-1594
PF
Pt7135 Firmware
Vivotek
7.5
7%
Jan 24An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text
CVE-2013-4985
IF
Ip8332 Firmware
Vivotek
7.5
9%
Dec 27Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream
CVE-2019-14458
CA
Camera
Vivotek
7.5
2%
Sep 18VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header
CVE-2019-10256
CA
Camera
Vivotek
9.8
1%
Sep 10An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found
CVE-2019-14457
CA
Camera
Vivotek
9.8
3%
Sep 10VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header
CVE-2018-14496
FF
Fd8136 Firmware
Vivotek
9.8
4%
Jul 10Vivotek FD8136 devices allow remote memory corruption and remote code execution because of a stack-based buffer overflow, related to sprintf, vlocal_buff_4326, and…
CVE-2018-14495
FF
Fd8136 Firmware
Vivotek
9.8
4%
Jul 10Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection vulnerability in our target device," a different issue than CVE-2018-14494
CVE-2018-14494
FF
Fd8136 Firmware
Vivotek
9.8
3%
Jul 10Vivotek FD8136 devices allow Remote Command Injection, related to BusyBox and wget
CVE-2018-18244
CA
Camera
Vivotek
6.1
1%
Jan 3Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP…
CVE-2018-18005
CA
Camera
Vivotek
6.1
1%
Jan 3Cross-site scripting in event_script.js in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript via a URL…
CVE-2018-18004
CA
Camera
Vivotek
5.3
1%
Jan 3Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable arbitrary system…
CVE-2018-14771
CA
Camera
Vivotek
8.8
3%
Sep 5VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi
CVE-2018-14770
CA
Camera
Vivotek
8.8
3%
Sep 5VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service)
CVE-2018-14769
CA
Camera
Vivotek
8.8
0%
Sep 5VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF
CVE-2018-14768
CA
Camera
Vivotek
8.8
3%
Aug 29Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code
CVE-2017-9829
NC
Network Camera Ib8369 Firmware
Vivotek
7.5
69%
Jun 23'/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers to read any file on the camera's Linux…
CVE-2017-9828
NC
Network Camera Fd8164 Firmware
Vivotek
9.8
82%
Jun 23'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any…
CVE-2008-4771
RM
Rtsp Mpeg4 SP Control
Vivotek
–
7%
Oct 28Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class (VATDecoder.dll 1.0.0.27 and 1.0.0.51), (2) D-Link MPEG4 SHM Audio Control…
CVE-2007-3167
MJ
Mjpegcontrol
Vivotek
–
6%
Jun 11Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control (aka MjpegControl) in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long…