What is CVE-2025-66052?

CVE-2025-66052 is a high-severity vulnerability in Vivotek Ip7137, classified under OS Command Injection. CVSS score: 7.2/10. Published 2026-01-09.

How severe is CVE-2025-66052?

High severity. CVSS v3 base score is 7.2 out of 10.

RCE in Vivotek Ip7137

CVE-2025-66052

Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection. Parameter "system_ntpIt" used by "/cgi-bin/admin/setparam.cgi" endpoint is not sanitized properly, allowing a user with administrative privileges to perf…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.013 (67.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Vivotek Ip7137 — versions 0200a
Vivotek Ip7137_firmware — versions 0200a

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

cvd@cert.pl (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2025-66052?: CVE-2025-66052 is a high-severity vulnerability in Vivotek Ip7137, classified under OS Command Injection. CVSS score: 7.2/10. Published 2026-01-09.
How severe is CVE-2025-66052?: High severity. CVSS v3 base score is 7.2 out of 10.