Unrated severityNVD Advisory· Published Jan 9, 2026· Updated Jan 9, 2026
Path traversal in Vivotek IP7137 cameras
CVE-2025-66051
Description
Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal. It is possible for an authenticated attacker to access resources beyond webroot directory using a direct HTTP request. Due to CVE-2025-66050, a password for administration panel is not set by default. The vendor has not replied to the CNA. Possibly all firmware versions are affected. Since the product has met End-Of-Life phase, a fix is not expected to be released.
Affected products
2- Vivotek/IP7137v5Range: 0200a
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- cert.pl/posts/2026/01/CVE-2025-66049mitrethird-party-advisory
News mentions
0No linked articles in our index yet.