CVE-2020-3931

Published: Jul 8, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command.

Affected (6)

Products: Geovision: Gv As210 Firmware, Gv As410 Firmware, Gv As810 Firmware, Gv Gf1921 Firmware, Gv As1010 Firmware, Gv Gf1922 Firmware

6 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geovision Gv As210 Firmware	Before 2.21

Running on/with	Platform Versions
Geovision Gv As210	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geovision Gv As410 Firmware	Before 2.21

Running on/with	Platform Versions
Geovision Gv As410	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geovision Gv As810 Firmware	Before 2.21

Running on/with	Platform Versions
Geovision Gv As810	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geovision Gv Gf1921 Firmware	Before 1.10

Running on/with	Platform Versions
Geovision Gv Gf1921	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geovision Gv As1010 Firmware	Before 1.32

Running on/with	Platform Versions
Geovision Gv As1010	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geovision Gv Gf1922 Firmware	Before 1.10

Running on/with	Platform Versions
Geovision Gv Gf1922	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (4)

https://www.acronis.com/en-us/blog/posts/backdoor-wide-open-critical-vulnerabilities-uncovered-geovision

Source: twcert@cert.org.tw

Third Party Advisory

https://www.twcert.org.tw/tw/cp-132-3754-b77d0-1.html

Source: twcert@cert.org.tw

Third Party Advisory

https://www.acronis.com/en-us/blog/posts/backdoor-wide-open-critical-vulnerabilities-uncovered-geovision

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.twcert.org.tw/tw/cp-132-3754-b77d0-1.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.