PT-2020-12942
CVE-2020-11949
·
تاريخ النشر
2020-05-28
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
VIVOTEK Network Cameras versions before XXXXX-VVTK-2.2002.xx.01x
VIVOTEK Network Cameras versions before XXXXX-VVTK-0XXXX Beta2
Description
The issue allows an authenticated user to obtain arbitrary files from a camera's local filesystem. This affects devices such as IT9388-HT.
Recommendations
For versions before XXXXX-VVTK-2.2002.xx.01x, update to a version that includes the necessary security fixes.
For versions before XXXXX-VVTK-0XXXX Beta2, update to a version that includes the necessary security fixes.
As a temporary workaround, consider restricting access to the
testserver.cgi component of the web service until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾