21 matches found
CVE-2026-88271
GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR...
CVE-2026-88269
GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSVR...
CVE-2026-88268
GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service...
CVE-2026-88270
GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated...
CVE-2026-88271 GV-LPC2011/LPC2211 - SSVR Guest Configuration Overwrite and Administrative Credential Takeover
GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR...
CVE-2026-88271
GeoVision GV-LPC2211 V1.13 (and GV-LPC2011) is vulnerable to a Guest-level configuration overwrite via the SSVR service. A user with Guest privileges can overwrite the device configuration and replace the administrator password , effectively gaining full administrative control. The CNA-assigned C...
EUVD-2026-75304
GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR...
CVE-2026-88270 GV-LPC2011/LPC2211 - SSVR Guest Firmware-Mode Pre-Validation Service Teardown Denial of Service
GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated...
CVE-2026-88270
GeoVision GV-LPC2211 (and GV-LPC2011, per the title) V1.13 is affected by a Denial of Service vulnerability in the SSVR (Secure Service Virtual Router) component. A user with Guest privileges can trigger the firmware-upgrade mode and cause live services to be disrupted before any firmware image i...
EUVD-2026-75303
GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated...
CVE-2026-88269 GV-LPC2011/LPC2211 - SSVR Guest Configuration and Credential Disclosure
GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSVR...
CVE-2026-88269
GeoVision GV-LPC2211 V1.13 (also referenced as GV-LPC2011) is affected by a credential disclosure vulnerability in its SSVR service. A Guest-level user can retrieve the persistent device configuration, which contains plaintext administrative and user credentials , leading to a high-impact confide...
EUVD-2026-75302
GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSVR...
CVE-2026-88268
GeoVision GV-LPC2211 (and GV-LPC2011 ) version V1.13 is affected by an authenticated stack buffer overflow in the SSVR fragment reassembly mechanism. A valid user can exploit this flaw to crash the SSVR service , resulting in a denial of service. The CVSS v3.1 score is 6.5 (MEDIUM) with a network...
EUVD-2026-75301
GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service...
CVE-2026-88268 GV-LPC2011/LPC2211 - SSVR Fragment-Reassembly Stack Overflow Denial of Service
GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service...
CVE-2026-57879
An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing RTSP custom authentication data. A remote attacker may exploit this vulnerability by...
EUVD-2026-39636
An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when parsing RTSP Digest authentication fields. A remote attacker may exploit this vulnerability by...
CVE-2026-57880 GV-LPC2011/LPC2211 - unauthorized buffer overflow via RTSP Digest username (ssvr)
An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when parsing RTSP Digest authentication fields. A remote attacker may exploit this vulnerability by...
CVE-2026-57880
CVE-2026-57880 affects GeoVision ssvr in GV-LPC2011 and GV-LPC2211 (versions V1.12 and earlier). The issue is an unauthenticated, stack-based buffer overflow caused by insufficient bounds checking when parsing RTSP Digest authentication fields. An attacker could send a crafted RTSP request with o...