Veille CVE

Recherche « GeoVision Inc. GV-LPCLPC2011/2211 »

15 CVE

Critique 5 Élevée 9 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « GeoVision Inc. GV-LPCLPC2011/2211 » ✕
  1. CVE-2026-88282 7.2 Élevée

    GeoVision Inc. GV-LPCLPC2011/2211

    GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a subsequent FTP-account update.

  2. CVE-2026-88278 9.8 Critique

    GeoVision Inc. GV-LPCLPC2011/2211

    GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations.

  3. CVE-2026-88277 8.8 Élevée

    GeoVision Inc. GV-LPCLPC2011/2211

    GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root.

  4. CVE-2026-88276 7.2 Élevée

    GeoVision Inc. GV-LPCLPC2011/2211

    GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root.

  5. CVE-2026-88268 6.5 Moyenne

    GeoVision Inc. GV-LPCLPC2011/2211

    GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service.

  6. CVE-2026-57881 9.8 Critique

    GeoVision Inc. GV-LPCLPC2011/2211

    An unauthenticated stack-based buffer overflow vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient length validation when processing remote login data. A remote attacker may exploit this vulnerability by sending crafted login data with overly long input, resulting in memory corruption, denial of service, or potentially arbitrary code execution.

  7. CVE-2026-57880 9.8 Critique

    GeoVision Inc. GV-LPCLPC2011/2211

    An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when parsing RTSP Digest authentication fields. A remote attacker may exploit this vulnerability by sending a crafted RTSP request containing overly long authentication data, resulting in memory corruption, denial of service, or potentially arbitrary code execution.

  8. CVE-2026-57879 9.8 Critique

    GeoVision Inc. GV-LPCLPC2011/2211

    An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing RTSP custom authentication data. A remote attacker may exploit this vulnerability by sending a crafted RTSP request, resulting in memory corruption, denial of service, or potentially arbitrary code execution.

  9. CVE-2026-57878 9.8 Critique

    GeoVision Inc. GV-LPCLPC2011/2211

    An unauthenticated stack-based buffer overflow vulnerability exists in thttpd in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing web request parameters in a specific request path. A remote attacker may exploit this vulnerability by sending a crafted HTTP request with overly long input, resulting in memory corruption, denial of service, or potentially arbitrary code execution.

  10. CVE-2026-57877 8.6 Élevée

    GeoVision Inc. GV-LPCLPC2011/2211

    An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper handling of externally controlled input during log message formatting in the login processing path. A remote attacker may exploit this vulnerability by sending crafted login data, potentially causing information disclosure, memory corruption, or a denial of service.

  11. CVE-2026-57876 7.5 Élevée

    GeoVision Inc. GV-LPCLPC2011/2211

    An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing HTTP request body data. A remote attacker may exploit this vulnerability by sending a crafted request with excessive input, causing memory corruption and resulting in a denial of service.

  12. CVE-2026-57875 7.5 Élevée

    GeoVision Inc. GV-LPCLPC2011/2211

    An unauthenticated NULL pointer dereference vulnerability exists in the HTTP request parsing logic of multiple CGI components in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper validation of required HTTP request metadata before it is used by the affected components. A remote attacker may exploit this vulnerability by sending a specially crafted HTTP request, causing the affected process to crash and resulting in a denial of service.

  13. CVE-2026-57874 7.5 Élevée

    GeoVision Inc. GV-LPCLPC2011/2211

    An unauthenticated buffer overflow vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when parsing filename values in multipart upload data. A remote attacker may exploit this vulnerability by sending a crafted upload request with overly long input, causing memory corruption and resulting in a denial of service.

  14. CVE-2026-57873 7.5 Élevée

    GeoVision Inc. GV-LPCLPC2011/2211

    An unauthenticated NULL pointer dereference vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper validation of multipart upload headers when processing certificate-related upload fields. A remote attacker may exploit this vulnerability by sending a malformed multipart request, causing the affected CGI process to crash and resulting in a denial of service.

  15. CVE-2026-57872 7.5 Élevée

    GeoVision Inc. GV-LPCLPC2011/2211

    An unauthenticated directory traversal vulnerability exists in get_fcont.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient validation of user-supplied file path input before the requested file is accessed by the CGI component. A remote attacker may exploit this vulnerability by sending a crafted request to read arbitrary files accessible to the affected process, resulting in information disclosure.