Gv Lpc2011 Firmware

gv-lpc2011_firmware

Vendor: Geovision • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-7371 1Geovision 2Gv Lpc2011 Firmware Gv Lpc2211 Firmware Jun 17, 2026 May 4, 2026 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript co...Show more Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability. Reflected XXS via the error message for requesting non-existing page.Show less
CVE-2026-42368 1Geovision 2Gv Lpc2011 Firmware Gv Lpc2211 Firmware Jun 17, 2026 May 4, 2026 N/A· v4 9.9 CRITICAL· v3 N/A· v2 A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can visit a webpag...Show more A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can visit a webpage to trigger this vulnerability.Show less
CVE-2026-42367 1Geovision 2Gv Lpc2011 Firmware Gv Lpc2211 Firmware Jun 17, 2026 May 4, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to credentials leak. An attacker can visit a webpage t...Show more A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to credentials leak. An attacker can visit a webpage to trigger this vulnerability.Show less
CVE-2026-42366 1Geovision 2Gv Lpc2011 Firmware Gv Lpc2211 Firmware Jun 17, 2026 May 4, 2026 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript co...Show more Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.Show less
CVE-2026-42365 1Geovision 2Gv Lpc2011 Firmware Gv Lpc2211 Firmware Jun 17, 2026 May 4, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can brute...Show more A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can bruteforce session cookies to trigger this vulnerability.Show less
CVE-2026-42364 1Geovision 2Gv Lpc2011 Firmware Gv Lpc2211 Firmware Jun 17, 2026 May 4, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary command execution. An attacker can modify...Show more An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary command execution. An attacker can modify a configuration value to trigger this vulnerability.Show less