What is CVE-2020-11949?

CVE-2020-11949 is a medium-severity vulnerability in Vivotek Cc8160. CVSS score: 6.5/10. Published 2020-05-28.

How severe is CVE-2020-11949?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Vivotek Cc8160

CVE-2020-11949

testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices.

EPSS: 0.012 (64.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Vivotek Cc8160
Vivotek Cc8160_firmware
Vivotek Cc8160\(hs\)
Vivotek Cc8160\(hs\)_firmware
Vivotek Cc8370-hv
Vivotek Cc8370-hv_firmware
Vivotek Cc8371-hv
Vivotek Cc8371-hv_firmware
Vivotek Cc9381-hv
Vivotek Cc9381-hv_firmware

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-11949?: CVE-2020-11949 is a medium-severity vulnerability in Vivotek Cc8160. CVSS score: 6.5/10. Published 2020-05-28.
How severe is CVE-2020-11949?: Medium severity. CVSS v3 base score is 6.5 out of 10.