EUVD-2020-25193

Malware in sbrugna...

Buffer overflow

Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command...

CVE-2020-3931

CVE-2020-3931 affects GeoVision Door Access Control devices. The connected records describe a buffer overflow in the device family that allows an unauthenticated, remote attacker to execute arbitrary commands over the network. The CVSS data indicate a CRITICAL impact with high confidentiality, in...

PT-2020-17807

Name of the Vulnerable Software and Affected Versions Geovision Door Access Control device family affected versions not specified Description A buffer overflow issue exists, allowing an unauthenticated remote attacker to execute arbitrary commands. Recommendations At the moment, there is no...

CVE-2020-3931: Buffer Copy without Checking Size of Input

Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command...

CVE-2020-3928: Use of Hard-coded Credentials

GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices...

CVE-2020-3929: Inadequate Encryption Strength

GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages...

CVE-2020-3930: Insertion of Sensitive Information into Log File

GeoVision Door Access Control device family improperly stores and controls access to system logs, any users can read these logs...

PT-2020-17806

Name of the Vulnerable Software and Affected Versions GeoVision Door Access Control device family affected versions not specified Description The issue concerns improper storage and control of access to system logs in the GeoVision Door Access Control device family. As a result, any user can read...

PT-2020-17805

Name of the Vulnerable Software and Affected Versions GeoVision Door Access Control device family affected versions not specified Description The issue concerns the use of shared cryptographic private keys for SSH and HTTPS in the GeoVision Door Access Control device family. This allows attackers...

PT-2020-17804

Name of the Vulnerable Software and Affected Versions GeoVision Door Access Control device family affected versions not specified Description The issue concerns a hardcoded root password in the GeoVision Door Access Control device family, where all devices use an identical password. Recommendatio...