Veille CVE

Recherche « GeoVision Inc. GV-LPC2011/LPC2211 - »

24 CVE

Critique 2 Élevée 11 Moyenne 11 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « GeoVision Inc. GV-LPC2011/LPC2211 - » ✕
  1. CVE-2026-88290 7.5 Élevée

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources.

  2. CVE-2026-88289 7.5 Élevée

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple VLSVR request handlers, allowing an unauthenticated remote attacker to crash the VLSVR service.

  3. CVE-2026-88288 6.5 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with valid web credentials to read arbitrary files accessible to the root-run web service.

  4. CVE-2026-88287 7.5 Élevée

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker to corrupt stack control state and crash the discovery process.

  5. CVE-2026-88286 7.5 Élevée

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections.

  6. CVE-2026-88285 9.4 Critique

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands.

  7. CVE-2026-88284 4.9 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211 -

    GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.

  8. CVE-2026-88283 4.9 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.

  9. CVE-2026-88281 4.9 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker.

  10. CVE-2026-88280 4.9 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker.

  11. CVE-2026-88279 4.9 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker.

  12. CVE-2026-88275 7.2 Élevée

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied.

  13. CVE-2026-88274 7.2 Élevée

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root.

  14. CVE-2026-88273 7.2 Élevée

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root.

  15. CVE-2026-88272 7.2 Élevée

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted.

  16. CVE-2026-88271 8.8 Élevée

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR.

  17. CVE-2026-88270 6.5 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated.

  18. CVE-2026-88269 6.5 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSVR.

  19. CVE-2026-7371 6.1 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211 · Geovision gv-lpc2011 firmware · Geovision gv-lpc2211 firmware

    Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability. Reflected XXS via the error message for requesting non-existing page.

  20. CVE-2026-42368 9.9 Critique

    GeoVision Inc. GV-LPC2011/LPC2211 · Geovision gv-lpc2011 firmware · Geovision gv-lpc2211 firmware

    A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can visit a webpage to trigger this vulnerability.

  21. CVE-2026-42367 6.5 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211 · Geovision gv-lpc2011 firmware · Geovision gv-lpc2211 firmware

    A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to credentials leak. An attacker can visit a webpage to trigger this vulnerability.

  22. CVE-2026-42366 6.1 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211 · Geovision gv-lpc2011 firmware · Geovision gv-lpc2211 firmware

    Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.

  23. CVE-2026-42365 7.5 Élevée

    GeoVision Inc. GV-LPC2011/LPC2211 · Geovision gv-lpc2011 firmware · Geovision gv-lpc2211 firmware

    A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can bruteforce session cookies to trigger this vulnerability.

  24. CVE-2026-42364 8.8 Élevée

    GeoVision Inc. GV-LPC2011/LPC2211 · Geovision gv-lpc2011 firmware · Geovision gv-lpc2211 firmware

    An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary command execution. An attacker can modify a configuration value to trigger this vulnerability.