Vivotek IP7137 vulnerabilities
3 known CVE vulnerabilities in Vivotek IP7137, translated and rated.
- CVE-2025-66052High
Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection via the parameter "system_ntpIt" used by the "/cgi-bin/admin/setparam.cgi" endpoint. Due to CVE-2025-66050, administrative access is not protected by default. The product has reached end-of-life, so no fix is expected.
- CVE-2025-66049High
Vivotek IP7137 camera with firmware version 0200a has an information disclosure vulnerability allowing live camera footage to be accessed via RTSP on port 8554 without authentication. The product has reached end-of-life, so no fix is expected.
- CVE-2025-66050Critical
Vivotek IP7137 camera with firmware version 0200a does not require a password by default when logging in as administrator. Users are not informed of the need to set a password, allowing unauthorized access. The product is End-of-Life, so a fix is not expected.