testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-05-28T12:43:32

Updated: 2024-08-04T11:42:00.838Z

Reserved: 2020-04-20T00:00:00

Link: CVE-2020-11949

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2020-05-28T13:15:11.317

Modified: 2021-07-21T11:39:23.747

Link: CVE-2020-11949

cve-icon Redhat

No data.