Vulnerabilidades do Geovision GV-LPCLPC2011/2211

CVE-2026-88282 Alta · 7.2 CWE-78 10/09/2026

GV-LPCLPC2011/2211 - Stored FTP-Username Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a subsequent FTP-account update.

CVE-2026-88278 Crítica · 9.8 CWE-294 10/09/2026

GV-LPCLPC2011/2211 - ONVIF WS-Security PasswordDigest Replay

GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations.

CVE-2026-88277 Alta · 8.8 CWE-78 10/09/2026

GV-LPCLPC2011/2211 - ONVIF Subscribe Address Command Injection

GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root.

CVE-2026-88276 Alta · 7.2 CWE-78 10/09/2026

GV-LPCLPC2011/2211 - Wireless WEP Key1-Key4 Command Injection

GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root.

CVE-2026-88268 Média · 6.5 CWE-121 10/09/2026

GV-LPC2011/LPC2211 - SSVR Fragment-Reassembly Stack Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service.

CVE-2026-57881 Crítica · 9.8 CWE-121 26/06/2026

Estouro de Buffer na Pilha no vlsvr das GeoVision GV-LPC2011/GV-LPC2211

Um estouro de buffer baseado em pilha, sem necessidade de autenticacao, existe no vlsvr das GeoVision GV-LPC2011 e GV-LPC2211 na versao V1.12 e anteriores. A vulnerabilidade e causada por validacao insuficiente de tamanho ao processar dados de login remotos. Um atacante remoto pode explorar essa falha enviando dados de login elaborados com entrada excessivamente longa, resultando em corrupcao de memoria, negacao de servico ou, potencialmente, execucao arbitraria de codigo.

CVE-2026-57880 Crítica · 9.8 CWE-121 26/06/2026

Estouro de buffer na pilha via RTSP Digest em GeoVision GV-LPC2011 e GV-LPC2211

Um estouro de buffer baseado em pilha, sem autenticação, existe no ssvr dos GeoVision GV-LPC2011 e GV-LPC2211 V1.12 e anteriores. A vulnerabilidade é causada por verificação de limites insuficiente ao analisar os campos de autenticação Digest do RTSP. Um atacante remoto pode explorar a falha enviando uma requisição RTSP elaborada com dados de autenticação excessivamente longos, resultando em corrupção de memória, negação de serviço ou, potencialmente, execução arbitrária de código.

CVE-2026-57879 Crítica · 9.8 CWE-121 26/06/2026

Estouro de buffer baseado em pilha no ssvr de GeoVision GV-LPC2011 e GV-LPC2211 via RTSP

Uma vulnerabilidade de estouro de buffer baseado em pilha, sem autenticação, existe no ssvr dos produtos GeoVision GV-LPC2011 e GV-LPC2211 V1.12 e anteriores. A falha é causada por verificação insuficiente de limites ao processar dados de autenticação personalizada RTSP. Um atacante remoto pode explorar a vulnerabilidade enviando uma requisição RTSP especialmente criada, resultando em corrupção de memória, negação de serviço ou, potencialmente, execução arbitrária de código.

CVE-2026-57878 Crítica · 9.8 CWE-121 26/06/2026

Estouro de buffer baseado em pilha sem autenticação no thttpd das GeoVision GV-LPC2011 e GV-LPC2211

Uma vulnerabilidade de estouro de buffer baseado em pilha, não autenticada, existe no thttpd nos GeoVision GV-LPC2011 e GV-LPC2211 V1.12 e anteriores. A vulnerabilidade é causada por verificação insuficiente de limites ao processar parâmetros de requisições web em um caminho de requisição específico. Um invasor remoto pode explorar essa vulnerabilidade enviando uma requisição HTTP elaborada com entrada excessivamente longa, resultando em corrupção de memória, negação de serviço ou potencialmente execução arbitrária de código.

CVE-2026-57877 Alta · 8.6 CWE-134 26/06/2026

GV-LPC2011/LPC2211 - unauthorized format string vulnerability (vlsvr)

An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper handling of externally controlled input during log message formatting in the login processing path. A remote attacker may exploit this vulnerability by sending crafted login data, potentially causing information disclosure, memory corruption, or a denial of service.

CVE-2026-57876 Alta · 7.5 CWE-787 26/06/2026

GV-LPC2011/LPC2211 - unauthorized out-of-bounds writing vulnerability (onvif.cgi)

An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing HTTP request body data. A remote attacker may exploit this vulnerability by sending a crafted request with excessive input, causing memory corruption and resulting in a denial of service.

CVE-2026-57875 Alta · 7.5 CWE-476 26/06/2026

GV-LPC2011/LPC2211 - unauthorized null pointer dereference vulnerability in packet parsing

An unauthenticated NULL pointer dereference vulnerability exists in the HTTP request parsing logic of multiple CGI components in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper validation of required HTTP request metadata before it is used by the affected components. A remote attacker may exploit this vulnerability by sending a specially crafted HTTP request, causing the affected process to crash and resulting in a denial of service.

CVE-2026-57874 Alta · 7.5 CWE-120 26/06/2026

GV-LPC2011/LPC2211 - unauthorized buffer overflow vulnerability (IEEE8021x_upload.cgi)

An unauthenticated buffer overflow vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when parsing filename values in multipart upload data. A remote attacker may exploit this vulnerability by sending a crafted upload request with overly long input, causing memory corruption and resulting in a denial of service.

CVE-2026-57873 Alta · 7.5 CWE-476 26/06/2026

GV-LPC2011/LPC2211 - unauthorized null pointer dereference vulnerability (IEEE8021x_upload.cgi)

An unauthenticated NULL pointer dereference vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by improper validation of multipart upload headers when processing certificate-related upload fields. A remote attacker may exploit this vulnerability by sending a malformed multipart request, causing the affected CGI process to crash and resulting in a denial of service.

CVE-2026-57872 Alta · 7.5 CWE-22 26/06/2026

GV-LPC2011/LPC2211 - unauthorized directory traversal vulnerability (get_fcont.cgi)

An unauthenticated directory traversal vulnerability exists in get_fcont.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient validation of user-supplied file path input before the requested file is accessed by the CGI component. A remote attacker may exploit this vulnerability by sending a crafted request to read arbitrary files accessible to the affected process, resulting in information disclosure.