PT-2025-47453 · Vivotek · Vivotek

Published 2025-11-19 · Updated 2025-11-19 · CVE-2025-12592

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/AU:Y/U:Red

Name of the Vulnerable Software and Affected Versions Vivotek (affected versions not specified)

Description Legacy Vivotek Device firmware utilizes default credentials for both the root and user login accounts. This allows unauthorized access to the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1392

Related Identifiers

CVE-2025-12592

Affected Products

Vivotek

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-12592 · Security Note
• https://t.me/CVEtracker/37737 · Telegram Post
• http://vapidlabs.com/advisory.php?v=219 · Note
• https://akamai.com/blog/security-research/rce-zero-day-in-legacy-vivotek-firmware · Note