Medium severity6.5NVD Advisory· Published Jan 9, 2026· Updated Jun 17, 2026
CVE-2025-66051
CVE-2025-66051
Description
Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal. It is possible for an authenticated attacker to access resources beyond webroot directory using a direct HTTP request. Due to CVE-2025-66050, a password for administration panel is not set by default. The vendor has not replied to the CNA. Possibly all firmware versions are affected. Since the product has met End-Of-Life phase, a fix is not expected to be released.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:vivotek:ip7137_firmware:0200a:*:*:*:*:*:*:*
- Range: 0200a
Patches
Vulnerability mechanics
References
1- cert.pl/posts/2026/01/CVE-2025-66049nvdThird Party Advisory
News mentions
0No linked articles in our index yet.