← Back

Qvidium

qvidium

2 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Amino A140 Firmware
amino_a140_firmware
1 CVE
Opera11 Firmware
opera11_firmware
1 CVE
Amino A140
amino_a140
0 CVEs
Opera11
opera11
0 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-63213
1Qvidium
1Opera11 Firmware
Jun 17, 2026
Nov 19, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The QVidium Opera11 device (firmware version 2.9.0-Ax4x-opera11) is vulnerable to Remote Code Execution (RCE) due to improper input validation on the /cgi-bin/net_ping.cgi endpoint. An attacker can exploit this vulnerabi...Show more
The QVidium Opera11 device (firmware version 2.9.0-Ax4x-opera11) is vulnerable to Remote Code Execution (RCE) due to improper input validation on the /cgi-bin/net_ping.cgi endpoint. An attacker can exploit this vulnerability by sending a specially crafted GET request with a malicious parameter to inject arbitrary commands. These commands are executed with root privileges, allowing attackers to gain full control over the device. This poses a significant security risk to any device running this software.Show less
CVE-2022-40021
1Qvidium
1Amino A140 Firmware
Jun 17, 2026
Feb 17, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
QVidium Technologies Amino A140 (prior to firmware version 1.0.0-283) was discovered to contain a command injection vulnerability.