Veille CVE

Recherche « Geovision gv-lpc2211 firmware »

7 CVE

Critique 1 Élevée 2 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Geovision gv-lpc2211 firmware » ✕
  1. CVE-2026-88270 6.5 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211

    GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated.

  2. CVE-2026-7371 6.1 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211 · Geovision gv-lpc2011 firmware · Geovision gv-lpc2211 firmware

    Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability. Reflected XXS via the error message for requesting non-existing page.

  3. CVE-2026-42368 9.9 Critique

    GeoVision Inc. GV-LPC2011/LPC2211 · Geovision gv-lpc2011 firmware · Geovision gv-lpc2211 firmware

    A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can visit a webpage to trigger this vulnerability.

  4. CVE-2026-42367 6.5 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211 · Geovision gv-lpc2011 firmware · Geovision gv-lpc2211 firmware

    A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to credentials leak. An attacker can visit a webpage to trigger this vulnerability.

  5. CVE-2026-42366 6.1 Moyenne

    GeoVision Inc. GV-LPC2011/LPC2211 · Geovision gv-lpc2011 firmware · Geovision gv-lpc2211 firmware

    Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.

  6. CVE-2026-42365 7.5 Élevée

    GeoVision Inc. GV-LPC2011/LPC2211 · Geovision gv-lpc2011 firmware · Geovision gv-lpc2211 firmware

    A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can bruteforce session cookies to trigger this vulnerability.

  7. CVE-2026-42364 8.8 Élevée

    GeoVision Inc. GV-LPC2011/LPC2211 · Geovision gv-lpc2011 firmware · Geovision gv-lpc2211 firmware

    An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary command execution. An attacker can modify a configuration value to trigger this vulnerability.