Gv Vd8700 Firmware

gv-vd8700_firmware

Vendor: Geovision • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-13408 2Androvideo Geovision 3Gv Vd8700 Firmware Gv Vr360 FirmwareVd 1 Firmware Jun 17, 2026 Aug 29, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportSettings.cgi?Download=filepath, without any authentication.
CVE-2019-13407 2Androvideo Geovision 3Gv Vd8700 Firmware Gv Vr360 FirmwareVd 1 Firmware Jun 17, 2026 Aug 29, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It leads to a reflected XSS because the error message does not es...Show more A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It leads to a reflected XSS because the error message does not escape properly.Show less
CVE-2019-11064 2Androvideo Geovision 3Gv Vd8700 Firmware Gv Vr360 FirmwareVd 1 Firmware Jun 17, 2026 Aug 29, 2019 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is not encrypted to get the administrator’s account and password...Show more A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is not encrypted to get the administrator’s account and password in plain text via cgibin/ExportSettings.cgi?Export=1 without any authentication.Show less