CC8160 vulnerabilities

2 known vulnerabilities in CC8160 from Vivotek. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  CC8160: Improper Neutralization of Special Elements used in a Command

  CVE-2024-7440Aug 3, 2024VivotekEPSS 2.69%

  ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d. It has been classified as critical. This affects the function getenv of the file upload_file.cgi. The manipulation of the argument QUERY_STRING leads to command injection.

• 9.8 Critical severity

  CC8160: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2024-7439Aug 3, 2024VivotekEPSS 1.03%

  ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical. Affected by this issue is the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based buffer o