CVE-2018-14770
VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service).
Date published : 2018-09-05
http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-003-v1.pdf