CVE-2026-22755: Vivotek Affected device model numbers are FD8365

Описание

Оригинално описание

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Vivotek Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330 (Firmware modules) allows OS Command Injection.This issue affects Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330: 0100a, 0106a, 0106b, 0107a, 0107b_1, 0109a, 0112a, 0113a, 0113d, 0117b, 0119e, 0120b, 0121, 0121d, 0121d_48573_1, 0122e, 0124d_48573_1, 012501, 012502, 0125c.

Засегнати продукти

• Vivotek Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP917: 0100a; 0106a; 0106b; 0107a; 0107b_1; 0109a; 0112a; 0113a; 0113d; 0117b; 0119e; 0120b; 0121; 0121d; 0121d_48573_1; 0122e; 0124d_48573_1; 012501; 012502; 0125c

Вид слабост

• CWE-77 Инжектиране на команди

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-22755
• https://nvd.nist.gov/vuln/detail/CVE-2026-22755
• http://www.vapidlabs.com/advisory.php?v=220
• https://www.akamai.com/blog/security-research/command-injection-vivotek-legacy-firmware-need-to-know