← Back

Pt7135 Firmware

pt7135_firmware

Vendor: Vivotek • 5 CVEs

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Vivotek
1Pt7135 Firmware
Nov 21, 2024
Jan 24, 2020
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, which cold let a malicious user execute arbitrary code.
1Vivotek
1Pt7135 Firmware
Nov 21, 2024
Jan 24, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malicious user obtain user credentials.
1Vivotek
1Pt7135 Firmware
Nov 21, 2024
Jan 24, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554.
1Vivotek
1Pt7135 Firmware
Nov 21, 2024
Jan 24, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which could let a remote malicious user execut...Show more
A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which could let a remote malicious user execute arbitrary code or cause a Denial of Service.Show less
1Vivotek
1Pt7135 Firmware
Nov 21, 2024
Jan 24, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text.