CVE-2018-14495
published 2019-07-10CVE-2018-14495: Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection vulnerability in our target device," a different issue than…
PriorityP258critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
4.41%
90.1th percentile
Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection vulnerability in our target device," a different issue than CVE-2018-14494. NOTE: The vendor has disputed this as a vulnerability and states that the issue does not cause a web server crash or have any other affect on it's performance
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vivotek | fd8136_firmware | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/https://www.vdalabs.com/2018/08/06/professional-iot-hacking-series-hunting-remote-command-injection/https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/https://www.vdalabs.com/2018/08/06/professional-iot-hacking-series-hunting-remote-command-injection/
2019-07-10
Published