PT-2019-9542

CVE-2018-18004

·

Publicado

2019-01-03

·

Atualizado

2020-08-24

Descrição por

CVSS 2.0
5.0
Média
MétricasAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a
Description The issue concerns an Incorrect Access Control in the mod inetd.cgi module, allowing remote attackers to enable arbitrary system services via a URL parameter.
Recommendations For VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a, update the firmware to a version that includes the fix for this issue.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-862: Missing Authorization
Identificadores relacionados
CVE-2018-18004
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com