VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 9, 2026· Updated Jan 9, 2026

Path traversal in Vivotek IP7137 cameras

CVE-2025-66051

Description

Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal. It is possible for an authenticated attacker to access resources beyond webroot directory using a direct HTTP request. Due to CVE-2025-66050, a password for administration panel is not set by default. The vendor has not replied to the CNA. Possibly all firmware versions are affected. Since the product has met End-Of-Life phase, a fix is not expected to be released.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Vivotek/IP7137llm-fuzzy2 versions
    = 0200a+ 1 more
    • (no CPE)range: = 0200a
    • (no CPE)range: 0200a

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.