PT-2018-12709 · Vivotek · Vivotek Fd8177

Published 2018-09-05 · Updated 2018-11-13 · CVE-2018-14769

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a

Description The issue allows for Cross-Site Request Forgery (CSRF) attacks.

Recommendations For VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a, update to a version that includes the fix for this issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2018-14769

Affected Products

Vivotek Fd8177

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-14769 · Security Note
• http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-004-v1.pdf · Vendor Advisory
• https://vivotek.com/website/support/cybersecurity · Note