CVE-2020-11949
Vivotek
- Published
- 28 May 2020
- Last modified
- 17 June 2026
- CVSS
- 6.5 v3.1
- Severity
- medium
- EPSS
- 1.2% (66th pct)
- CISA KEV
- Not listed
- NVD status
- Modified
- Weaknesses
- None assigned
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices.
Exploitation
Not listed in the CISA Known Exploited Vulnerabilities catalogue as of 2026.09.04. That is an absence of confirmed public exploitation, not evidence that exploitation has not occurred. EPSS models a 1.2% probability of exploitation activity in the next 30 days.
Affected products
| Product | Vendor | Type | Versions named |
|---|---|---|---|
| CC8160 | Vivotek | unknown | <= 0113b, <= 0222g |
| CC8160(HS) | Vivotek | unknown | <= 0113b, <= 0222g |
| CC8370-HV | Vivotek | unknown | <= 0213b, <= 0222g |
| CC8371-HV | Vivotek | unknown | <= 0113b, <= 0222g |
| CC9381-HV | Vivotek | unknown | <= 0222g |
| CD8371-HNTV | Vivotek | unknown | <= 0113b, <= 0222g |
| CD8371-HNVF2 | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8166A | Vivotek | unknown | <= 0213b, <= 0222g |
| FD8166A-N | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8167A | Vivotek | unknown | <= 0213b, <= 0222g |
| FD8169A | Vivotek | unknown | <= 0213b, <= 0222g |
| FD816B-HF2 | Vivotek | unknown | <= 0113b, <= 0222g |
| FD816B-HT | Vivotek | unknown | <= 0113b, <= 0222g |
| FD816BA-HF2 | Vivotek | unknown | <= 0113b, <= 0222g |
| FD816BA-HT | Vivotek | unknown | <= 0113b, <= 0222g |
| FD816C-HF2 | Vivotek | unknown | <= 0213b, <= 0222g |
| FD816CA-HF2 | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8177-H | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8177-HT | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8179-H | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8182-F1 | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8182-F2 | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8182-T | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8366-V | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8367A-V | Vivotek | unknown | <= 0213b, <= 0222g |
| FD8369A-V | Vivotek | unknown | <= 0213b, <= 0222g |
| FD836B-EHTV | Vivotek | unknown | <= 0113b, <= 0222g |
| FD836B-EHVF2 | Vivotek | unknown | <= 0113b, <= 0222g |
| FD836B-HTV | Vivotek | unknown | <= 0113b, <= 0222g |
| FD836B-HVF2 | Vivotek | unknown | <= 0113b, <= 0222g |
| FD836BA-EHTV | Vivotek | unknown | <= 0113b, <= 0222g |
| FD836BA-EHVF2 | Vivotek | unknown | <= 0113b, <= 0222g |
| FD836BA-HTV | Vivotek | unknown | <= 0113b, <= 0222g |
| FD836BA-HVF2 | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8377-EHTV | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8377-HTV | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8377-HV | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8379-HV | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8382-ETV | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8382-EVF2 | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8382-TV | Vivotek | unknown | <= 0113b, <= 0222g |
| FD8382-VF2 | Vivotek | unknown | <= 0113b, <= 0222g |
| FD9165-HT | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9165-HT-A | Vivotek | unknown | <= 0100m, <= 0222g |
| FD9166-HN | Vivotek | unknown | <= 0222g |
| FD9167-H | Vivotek | unknown | <= 0113b, <= 0222g |
| FD9167-HT | Vivotek | unknown | <= 0113b, <= 0222g |
| FD9171-HT | Vivotek | unknown | <= 0113b, <= 0222g |
| FD9181-HT | Vivotek | unknown | <= 0113b, <= 0222g |
| FD9187-H | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9187-HT | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9187-HT-A | Vivotek | unknown | <= 0100m, <= 0222g |
| FD9189-H | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9189-HM | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9189-HT | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9360-H | Vivotek | unknown | <= 0222g |
| FD9365-EHTV | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9365-EHTV-A | Vivotek | unknown | <= 0100m, <= 0222g |
| FD9365-HTV | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9365-HTV-A | Vivotek | unknown | <= 0100m, <= 0222g |
| FD9365-HTVL | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9366-HV | Vivotek | unknown | <= 0222g |
| FD9367-EHTV | Vivotek | unknown | <= 0113b, <= 0222g |
| FD9367-HTV | Vivotek | unknown | <= 0113b, <= 0222g |
| FD9367-HTV(EPOC) | Vivotek | unknown | <= 0222g |
| FD9367-HV | Vivotek | unknown | <= 0113b, <= 0222g |
| FD9368-HTV | Vivotek | unknown | <= 0222g |
| FD9371-EHTV | Vivotek | unknown | <= 0113b |
| FD9380-H | Vivotek | unknown | <= 0222g |
| FD9381-EHTV | Vivotek | unknown | <= 0113b |
| FD9387-EHTV | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9387-EHTV-A | Vivotek | unknown | <= 0100m, <= 0222g |
| FD9387-EHV | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9387-HTV | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9387-HTV-A | Vivotek | unknown | <= 0100m, <= 0222g |
| FD9387-HV | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9388-HTV | Vivotek | unknown | <= 0222g |
| FD9389-EHMV | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9389-EHTV | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9389-EHV | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9389-HMV | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9389-HTV | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9389-HV | Vivotek | unknown | <= 0121d, <= 0222g |
| FD9391-EHTV | Vivotek | unknown | <= 0121d, <= 0222g |
| FE9180-H | Vivotek | unknown | <= 0113b, <= 0222g |
| FE9181-H | Vivotek | unknown | <= 0113b, <= 0222g |
| FE9182-H | Vivotek | unknown | <= 0113b, <= 0222g |
| FE9191 | Vivotek | unknown | <= 0124c, <= 0222g |
| FE9380-HV | Vivotek | unknown | <= 0222g, <= 0222k |
| FE9381-EHV | Vivotek | unknown | <= 0113b, <= 0222g |
| FE9382-EHV | Vivotek | unknown | <= 0113b, <= 0222g |
| FE9391-EV | Vivotek | unknown | <= 0124c, <= 0222g |
| FE9582-EHNV | Vivotek | unknown | <= 0113b, <= 0222g |
| IB8360 | Vivotek | unknown | <= 0113a, <= 0222g |
| IB8360-W | Vivotek | unknown | <= 0113a, <= 0222g |
| IB8367A | Vivotek | unknown | <= 0213b, <= 0222g |
| IB8369A | Vivotek | unknown | <= 0213b, <= 0222g |
| IB836B-EHF3 | Vivotek | unknown | <= 0113b, <= 0222g |
| IB836B-EHT | Vivotek | unknown | <= 0113b, <= 0222g |
| IB836B-HF3 | Vivotek | unknown | <= 0113b, <= 0222g |
| IB836B-HRF3 | Vivotek | unknown | <= 0113b, <= 0222g |
| IB836B-HT | Vivotek | unknown | <= 0113b, <= 0222g |
| IB836BA-EHF3 | Vivotek | unknown | <= 0113b, <= 0222g |
| IB836BA-EHT | Vivotek | unknown | <= 0113b, <= 0222g |
| IB836BA-HF3 | Vivotek | unknown | <= 0113b, <= 0222g |
| IB836BA-HT | Vivotek | unknown | <= 0113b, <= 0222g |
| IB8377-EHT | Vivotek | unknown | <= 0113b, <= 0222g |
| IB8377-H | Vivotek | unknown | <= 0113b, <= 0222g |
| IB8377-HT | Vivotek | unknown | <= 0113b, <= 0222g |
| IB8382-EF3 | Vivotek | unknown | <= 0113b, <= 0222g |
| IB8382-ET | Vivotek | unknown | <= 0113b, <= 0222g |
| IB8382-F3 | Vivotek | unknown | <= 0213b, <= 0222g |
| IB8382-T | Vivotek | unknown | <= 0113b, <= 0222g |
| IB9360-H | Vivotek | unknown | <= 0222g |
| IB9365-EHT | Vivotek | unknown | <= 0121d, <= 0222g |
| IB9365-EHT-A | Vivotek | unknown | <= 0100m, <= 0222g |
| IB9365-HT | Vivotek | unknown | <= 0121d, <= 0222g |
| IB9365-HT-A | Vivotek | unknown | <= 0100m, <= 0222g |
| IB9367-EH | Vivotek | unknown | <= 0113b, <= 0222g |
| IB9367-EHT | Vivotek | unknown | <= 0113b, <= 0222g |
| IB9367-H | Vivotek | unknown | <= 0113b, <= 0222g |
| IB9367-HT | Vivotek | unknown | <= 0113b, <= 0222g |
| IB9368-HT | Vivotek | unknown | <= 0222g |
| IB9371-EHT | Vivotek | unknown | <= 0113b |
| IB9380-H | Vivotek | unknown | <= 0222g |
| IB9381-EHT | Vivotek | unknown | <= 0113b |
| IB9387-EH | Vivotek | unknown | <= 0121d, <= 0222g |
| IB9387-EHT | Vivotek | unknown | <= 0121d, <= 0222g |
| IB9387-EHT-A | Vivotek | unknown | <= 0100m, <= 0222g |
| IB9387-H | Vivotek | unknown | <= 0121d, <= 0222g |
| IB9387-HT | Vivotek | unknown | <= 0121d, <= 0222g |
| IB9387-HT-A | Vivotek | unknown | <= 0100m, <= 0222g |
| IB9388-HT | Vivotek | unknown | <= 0222g |
| IB9389-EH | Vivotek | unknown | <= 0121d, <= 0222g |
| IB9389-EHM | Vivotek | unknown | <= 0121d, <= 0222g |
| IB9389-EHT | Vivotek | unknown | <= 0121d, <= 0222g |
| IB9389-H | Vivotek | unknown | <= 0121d, <= 0222g |
| IB9389-HM | Vivotek | unknown | <= 0121d, <= 0222g |
| IB9389-HT | Vivotek | unknown | <= 0121d, <= 0222g |
| IB9391-EHT | Vivotek | unknown | <= 0121d, <= 0222g |
| IP8160 | Vivotek | unknown | <= 0113a, <= 0222g |
| IP8160-W | Vivotek | unknown | <= 0113a, <= 0222g |
| IP8166 | Vivotek | unknown | <= 0213b, <= 0222g |
| IP9164-HT | Vivotek | unknown | <= 0100m, <= 0222g |
| IP9164-LPC | Vivotek | unknown | <= 0100m, <= 0222g |
| IP9165-HP | Vivotek | unknown | <= 0121d, <= 0222g |
| IP9165-HT | Vivotek | unknown | <= 0121d, <= 0222g |
| IP9165-LPC | Vivotek | unknown | <= 0121d, <= 0222g |
| IP9165-LPC(I-CS KIT) | Vivotek | unknown | <= 0113d, <= 0222g |
| IP9167-HP | Vivotek | unknown | <= 0113b, <= 0222g |
| IP9167-HT | Vivotek | unknown | <= 0113b, <= 0222g |
| IP9171-HP | Vivotek | unknown | <= 0113b, <= 0222g |
| IP9172-LPC(FREEWAY) | Vivotek | unknown | <= 0121d |
| IP9181-H | Vivotek | unknown | <= 0113b, <= 0222g |
| IP9191-HP | Vivotek | unknown | <= 0121d, <= 0222g |
| IP9191-HT | Vivotek | unknown | <= 0121d, <= 0222g |
| IT9360-H | Vivotek | unknown | <= 0222g |
| IT9380-H | Vivotek | unknown | <= 0222g |
| IT9388-HT | Vivotek | unknown | <= 0222g |
| IT9389-H | Vivotek | unknown | <= 0121d, <= 0222g |
| IT9389-HT | Vivotek | unknown | <= 0121d, <= 0222g |
| IZ9361-EH | Vivotek | unknown | <= 0114a, <= 0222g |
| MA9321-EHTV | Vivotek | unknown | <= 0113a, <= 0222g |
| MA9322-EHTV | Vivotek | unknown | <= 0114c, <= 0222g |
| MD8563-DEH | Vivotek | unknown | <= 0113b, <= 0222g |
| MD8563-EH | Vivotek | unknown | <= 0113b, <= 0222g |
| MD8564-EH | Vivotek | unknown | <= 0113b, <= 0222g |
| MD8565-N | Vivotek | unknown | <= 0113b, <= 0222g |
| MD9560-DH | Vivotek | unknown | <= 0222g |
| MD9560-H | Vivotek | unknown | <= 0222g |
| MD9561-H | Vivotek | unknown | <= 0121d, <= 0222g |
| MD9581-H | Vivotek | unknown | <= 0121d, <= 0222g |
| MS9321-EHV | Vivotek | unknown | <= 0100i, <= 0222g |
| MS9390-HV | Vivotek | unknown | <= 0121d, <= 0222g |
| SD9161-H | Vivotek | unknown | <= 0114a, <= 0222g |
| SD9361-EHL | Vivotek | unknown | <= 0114a, <= 0222g |
| SD9362-EH | Vivotek | unknown | <= 0114a, <= 0222g |
| SD9362-EH-V2 | Vivotek | unknown | <= 0104j, <= 0222g |
| SD9362-EHL | Vivotek | unknown | <= 0114a, <= 0222g |
| SD9363-EHL | Vivotek | unknown | <= 0114a, <= 0222g |
| SD9363-EHL-V2 | Vivotek | unknown | <= 0114a, <= 0222g |
| SD9364-EH | Vivotek | unknown | <= 0114a, <= 0222g |
| SD9364-EH-V2 | Vivotek | unknown | <= 0104j, <= 0222g |
| SD9364-EHL | Vivotek | unknown | <= 0114a, <= 0222g |
| SD9364-EHL-V2 | Vivotek | unknown | <= 0114a, <= 0222g |
| SD9365-EHL | Vivotek | unknown | <= 0114a, <= 0222g |
| SD9366-EH | Vivotek | unknown | <= 0114a, <= 0222g |
| SD9366-EH-V2 | Vivotek | unknown | <= 0104j, <= 0222g |
| SD9366-EHL | Vivotek | unknown | <= 0114a, <= 0222g |
| SD9374-EHL | Vivotek | unknown | <= 0123b |
| TB9330-E | Vivotek | unknown | <= 0121d, <= 0222g |
| TB9331-E | Vivotek | unknown | <= 0121d, <= 0222g |
| VC8101 | Vivotek | unknown | <= 0113b, <= 0222g |
| VS8100-V2 | Vivotek | unknown | <= 0113b, <= 0222g |
References
Vendor advisory and patch
- http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2020-001-v1.pdf
- http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2020-001-v1.pdf
Record assembled from NVD, CISA KEV 2026.09.04 and FIRST EPSS 2026-09-04. Affected products are those NVD's CPE configuration names that fall inside this site's scope; a CVE may affect products outside it.