A vulnerability identified as critical has been detected in Vivotek IP7137 0200a. Impacted is an unknown function of the file /cgi-bin/admin/setparam.cgi. This manipulation of the argument system_ntpIt causes os command injection. This vulnerability only affects products that are no longer supported by the maintainer.

The identification of this vulnerability is CVE-2025-66052. It is possible to initiate the attack remotely. There is no exploit available.