A post‑authentication buffer overflow exists in Vivotek’s FD8136 camera at the /cgi-bin/admin/eventtask.cgi endpoint. Compiled data sent by an authenticated user can overwrite memory, allowing an attacker to run arbitrary code with root privileges. This provides full control over the device, enabling configuration changes, disabling cameras, or using the device as a lateral movement tool.

The vulnerability affects Vivotek's FD8136 series cameras running firmware version FD8136-VVTK-0300a. No other versions or products are listed as affected in the current data. The flaw is limited to the administrative interface of this specific camera model.

The attack requires a valid login to the camera’s admin interface but is possible from any network that can reach the device. The CVSS score of 8.8 indicates high severity; however unrestricted root access implies a very high risk. The EPSS score of <1% indicates a very low probability of exploitation, and the issue is not listed in CISA KEV, but because the vulnerability permits full device compromise, it should be treated with high priority.