Vivotek Ip7137_firmware
4 CVEs affecting Vivotek Ip7137_firmware. Latest disclosed: 2026-01-09. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-66050 | Critical | 9.8 | 2026-01-09 | Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any password when logging in as an administrator. While it is possible… |
CVE-2025-66049 | High | 7.5 | 2026-01-09 | Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP p… |
CVE-2025-66052 | High | 7.2 | 2026-01-09 | Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection. Parameter "system_ntpIt" used by "/cgi-bin/admin/setparam.cgi" endpoint i… |
CVE-2025-66051 | Medium | 6.5 | 2026-01-09 | Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal. It is possible for an authenticated attacker to access resources beyond webr… |