GeoVision
Vulnerability activity for GeoVision: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 3
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 30
- Critical (CVSS 9+)
- 3
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 39
- Critical (CVSS 9+)
- 8
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 9.8CriticalJun 17, 2024GeoVision Multiple Devices Code / command injectionCVE-2024-6047Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Added to KEV May 7, 2025 · 324 days after publicationExploited10% likelyDetection
- 9.8CriticalNov 15, 2024GeoVision Multiple Devices Code / command injectionCVE-2024-11120Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Added to KEV May 7, 2025 · 173 days after publicationExploited28% likelyDetection
Recent
- 7.5HighOct 19, 2026GeoVision GV-ASManager Memory corruptionCVE-2026-108984A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
- 9.8CriticalOct 19, 2026GeoVision GV-ASManager Code / command injectionCVE-2026-108983A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
- 6.2MediumOct 12, 2026GeoVision GV-E-map Server Auth bypass / access controlCVE-2026-107437GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.
- 7.5HighOct 2, 2026GeoVision GV-Eye Information disclosureCVE-2026-103098Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key
- 7.5HighOct 2, 2026GeoVision GV-Eye Information disclosureCVE-2026-103097An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.
- 7.5HighOct 2, 2026GeoVision GV-Eye Information disclosureCVE-2026-103096API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.
- 7.8HighSep 17, 2026GeoVision GV-Remote E-map Privilege escalationCVE-2026-92838A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location. If successfully exploited, an attacker with local write access to the affected directory could achieve arbitrary code execution in the security context of the GV-Remote E-Map process.
- 7.5HighSep 10, 2026GeoVision GV-LPC2011/LPC2211 Denial of serviceCVE-2026-88290GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources.
- 7.5HighSep 10, 2026GeoVision GV-LPC2011/LPC2211 Memory corruptionCVE-2026-88289GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple VLSVR request handlers, allowing an unauthenticated remote attacker to crash the VLSVR service.
- 6.5MediumSep 10, 2026GeoVision GV-LPC2011/LPC2211 Path traversal / file handlingCVE-2026-88288GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with valid web credentials to read arbitrary files accessible to the root-run web service.
- 7.5HighSep 10, 2026GeoVision GV-LPC2011/LPC2211 Memory corruptionCVE-2026-88287GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker to corrupt stack control state and crash the discovery process.
- 7.5HighSep 10, 2026GeoVision GV-LPC2011/LPC2211 Denial of serviceCVE-2026-88286GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections.
- 9.4CriticalSep 10, 2026GeoVision GV-LPC2011/LPC2211 Auth bypass / access controlCVE-2026-88285GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands.
- 4.9MediumSep 10, 2026GeoVision GV-LPC2011/LPC2211 - Memory corruptionCVE-2026-88284GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.
- 4.9MediumSep 10, 2026GeoVision GV-LPC2011/LPC2211 Memory corruptionCVE-2026-88283GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.
- 7.2HighSep 10, 2026GeoVision GV-LPCLPC2011/2211 Code / command injectionCVE-2026-88282GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a subsequent FTP-account update.
- 4.9MediumSep 10, 2026GeoVision GV-LPC2011/LPC2211 Memory corruptionCVE-2026-88281GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker.
- 4.9MediumSep 10, 2026GeoVision GV-LPC2011/LPC2211 Memory corruptionCVE-2026-88280GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker.
- 4.9MediumSep 10, 2026GeoVision GV-LPC2011/LPC2211 Memory corruptionCVE-2026-88279GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker.
- 9.8CriticalSep 10, 2026GeoVision GV-LPCLPC2011/2211 Auth bypass / access controlCVE-2026-88278GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations.
- 8.8HighSep 10, 2026GeoVision GV-LPCLPC2011/2211 Code / command injectionCVE-2026-88277GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root.
- 7.2HighSep 10, 2026GeoVision GV-LPCLPC2011/2211 Code / command injectionCVE-2026-88276GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root.
- 7.2HighSep 10, 2026GeoVision GV-LPC2011/LPC2211 Code / command injectionCVE-2026-88275GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied.
- 7.2HighSep 10, 2026GeoVision GV-LPC2011/LPC2211 Code / command injectionCVE-2026-88274GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root.
- 7.2HighSep 10, 2026GeoVision GV-LPC2011/LPC2211 Code / command injectionCVE-2026-88273GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root.
- 7.2HighSep 10, 2026GeoVision GV-LPC2011/LPC2211 Code / command injectionCVE-2026-88272GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted.
- 8.8HighSep 10, 2026GeoVision GV-LPC2011/LPC2211 Auth bypass / access controlCVE-2026-88271GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR.
- 6.5MediumSep 10, 2026GeoVision GV-LPC2011/LPC2211 Auth bypass / access controlCVE-2026-88270GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated.
- 6.5MediumSep 10, 2026GeoVision GV-LPC2011/LPC2211 Auth bypass / access controlCVE-2026-88269GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSVR.
- 6.5MediumSep 10, 2026GeoVision GV-LPCLPC2011/2211 Memory corruptionCVE-2026-88268GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service.
- 9.0CriticalMay 4, 2026Geovision gv-vms firmware Memory corruptionCVE-2026-7372A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. #### Stack-overflow via unconstrained sscanf The call to `sscanf` at [1] to split the `Buffer` variable into the `username` and `password` variables doesn't limit the size of the extracted content to match the destination buffers
- 7.4HighMay 4, 2026Geovision gv-lpc2011 firmware XSSCVE-2026-7371Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability. Reflected XXS via the error message for requesting non-existing page.
- 9.3CriticalMay 4, 2026Geovision gv-ip device utilityCVE-2026-7161An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak. An attacker can listen to broadcast messages to trigger this vulnerability. When interacting with various Geovision devices on the network, the utility may send privileged commands; in order to do so, the username and password of the device need to be provided. In some instances the command is broadcaste
- 9.0CriticalMay 4, 2026Geovision gv-vms firmware Memory corruptionCVE-2026-42370A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
- 9.9CriticalMay 4, 2026Geovision gv-lpc2011 firmware Privilege escalationCVE-2026-42368A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can visit a webpage to trigger this vulnerability.
- 6.5MediumMay 4, 2026Geovision gv-lpc2011 firmware Privilege escalationCVE-2026-42367A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to credentials leak. An attacker can visit a webpage to trigger this vulnerability.
- 7.4HighMay 4, 2026Geovision gv-lpc2011 firmware XSSCVE-2026-42366Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
- 8.6HighMay 4, 2026Geovision gv-lpc2011 firmwareCVE-2026-42365A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can bruteforce session cookies to trigger this vulnerability.
- 9.9CriticalMay 4, 2026Geovision gv-lpc2011 firmware Code / command injectionCVE-2026-42364An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary command execution. An attacker can modify a configuration value to trigger this vulnerability.
- 9.8CriticalJun 17, 2024GeoVision Multiple Devices Code / command injectionCVE-2024-6047Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Exploited10% likelyDetection
- 9.8CriticalNov 15, 2024GeoVision Multiple Devices Code / command injectionCVE-2024-11120Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Exploited28% likelyDetection
Top products
- GV-LPC2011/LPC221117 CVEs in the last year, 1 critical
- gv-lpc2011 firmware6 CVEs in the last year, 2 critical
- GV-LPCLPC2011/22115 CVEs in the last year, 1 critical
- GV-Eye3 CVEs in the last year
- gv-vms firmware2 CVEs in the last year, 2 critical
- GV-ASManager2 CVEs in the last year, 1 critical
- GV-Remote E-map1 CVE in the last year
- GV-LPC2011/LPC2211 -1 CVE in the last year
- gv-ip device utility1 CVE in the last year, 1 critical
- GV-E-map Server1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.