vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2017-9828

N/A
Published: June 23, 2017 at 10:00 PM UTC
Updated: June 17, 2026 at 01:28 AM UTC
5 products affected across 1 vendorNetwork Camera IB8369 FirmwareNetwork Camera FD8164 FirmwareNetwork Camera Fd8164

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 82%

Description

'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any shell command as root via a crafted HTTP request. This vulnerability is already verified on VIVOTEK Network Camera IB8369/FD8164/FD816BA; most others have similar firmware that may be affected. An attack uses shell metacharacters in the senderemail parameter.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Network Camera FD8164 Firmware· Vivotek
95%
fd8164-_vvtk-200b
vivotek-network-camera-fd8164 (same device)
Network Camera IB8369 Firmware· Vivotek
95%
ib8369-vvtk-102a
vivotek-network-camera-ib8369 (same device)
Network Camera Fd8164· Vivotekdevice
80%
All versions
Network Camera Fd816Ba· Vivotekdevice
80%
All versions
Network Camera Ib8369· Vivotekdevice
80%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

x_refsource_MISCThird Party Advisory
Source: [email protected]
https://blog.cal1.cn/post/An%20easy%20way%20to%20pwn%20most%20of%20the%20vivotek%20network%20cameras

CVSS

10HIGH[email protected]
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-78

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card