SD9364 vulnerabilities

2 known vulnerabilities in SD9364 from Vivotek. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  SD9364: Improper Neutralization of Special Elements used in a Command

  CVE-2024-7442Aug 3, 2024VivotekEPSS 2.69%

  ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been rated as critical. This issue affects the function getenv of the file upload_file.cgi. The manipulation of the argument QUERY_STRING leads to command injection.

• 9.8 Critical severity

  SD9364: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2024-7441Aug 3, 2024VivotekEPSS 8.13%

  ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been declared as critical. This vulnerability affects the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based