CVE-2024-7440

Summary

CVE-2024-7440 is a critical vulnerability affecting the Vivotek CC8160 VVTK-0100d, specifically the function getenv in the file upload_file.cgi. An attacker can exploit this issue by manipulating the QUERY_STRING argument, resulting in command injection. This vulnerability is remotely exploitable and identified as VDB-273525. Importantly, this vulnerability only affects unsupported versions of the product, as the vendor has confirmed that the affected release tree is end-of-life.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.