CVE-2024-7443

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Vivotek IB8367A VVTK-0100b. Affected is the function getenv of the file upload_file.cgi. The manipulation of the argument QUERY_STRING leads to command injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-273528. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life.

• CWE-77

• https://vuldb.com/?ctiid.273528Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.273528Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.383844Third Party Advisory, VDB Entry
• https://yjz233.notion.site/vivotek-IB8367A-has-command-injection-vulnerability-in-upload_file-cgi-899e5d529fb14b4189534b2b9830bfff?pvs=4Permissions Required

Published

Aug 3, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-7437A vulnerability, which was classified as critical, was found…4.3
• CVE-2024-7438A vulnerability has been found in SimpleMachines SMF 2.1.4 a…4.3
• CVE-2024-7439** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…9.8
• CVE-2024-7440** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…9.8
• CVE-2024-7441** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…9.8
• CVE-2024-7442** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…9.8
• CVE-2024-7444A vulnerability classified as critical was found in itsource…9.8
• CVE-2024-7445A vulnerability, which was classified as critical, has been …7.2
• CVE-2024-7446A vulnerability, which was classified as critical, was found…7.2
• CVE-2024-7447The Interactive Contact Form and Multi Step Form Builder wit…5.3
• CVE-2024-7448Magnet Forensics AXIOM Command Injection Remote Code Executi…8
• CVE-2024-7449A vulnerability, which was classified as critical, was found…9.8