CVE-2020-3931

CVE-2020-3931 affects GeoVision Door Access Control devices. The connected records describe a buffer overflow in the device family that allows an unauthenticated, remote attacker to execute arbitrary commands over the network. The CVSS data indicate a CRITICAL impact with high confidentiality, in...

Critical Bugs and Backdoor Found in GeoVision's Fingerprint and Card Scanners

GeoVision, a Taiwanese manufacturer of video surveillance systems and IP cameras, recently patched three of the four critical flaws impacting its card and fingerprint scanners that could've potentially allowed attackers to intercept network traffic and stage man-in-the-middle attacks. In a report...

Critical Bugs and Backdoor Found in GeoVision's Fingerprint and Card Scanners

GeoVision, a Taiwanese manufacturer of video surveillance systems and IP cameras, recently patched three of the four critical flaws impacting its card and fingerprint scanners that could've potentially allowed attackers to intercept network traffic and stage man-in-the-middle attacks. In a report...

GeoVision GV-GF192x Information Disclosure Vulnerability

GeoVision GV-GF192x is an access control device from GeoVision Taiwan, China. An information disclosure vulnerability exists in GeoVision GV-GF192x v1.10. An attacker can exploit this vulnerability to obtain log messages...

CVE-2020-3928

GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices...

CVE-2020-3929

GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages...

CVE-2020-3929

GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages...

CVE-2020-3930

GeoVision Door Access Control device family improperly stores and controls access to system logs, any users can read these logs...

CVE-2020-3928

GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices...

CVE-2020-3930

GeoVision Door Access Control device family improperly stores and controls access to system logs, any users can read these logs...

Information disclosure

GeoVision Door Access Control device family improperly stores and controls access to system logs, any users can read these logs...

Information disclosure

GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages...

Hardcoded credentials

GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices...

CVE-2020-3929

CVE-2020-3929 affects GeoVision Door Access Control device families that use shared cryptographic private keys for SSH and HTTPS. The underlying issue enables attackers to perform MITM attacks with derived keys and recover plaintext from encrypted messages. NVD notes medium base scores (CVSSv2 4....

CVE-2020-3928 GeoVision Door Access Control Device - Hardcoded privileged password

GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices...

CVE-2020-3929 GeoVision Door Access Control Device - Shared cryptographic keys

GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages...

CVE-2020-3928

GeoVision Door Access Control device family is affected by CVE-2020-3928 due to a hardcoded root password shared across devices, enabling unauthorized access. The Hacker News report also notes additional issues tied to the same disclosures: hardcoded SSH private keys, unauthenticated access to de...

CVE-2020-3930 GeoVision Door Access Control Device - Information disclosure vulnerability

GeoVision Door Access Control device family improperly stores and controls access to system logs, any users can read these logs...

CVE-2020-3930

CVE-2020-3930 applies to GeoVision Door Access Control device family. It is an information disclosure vulnerability where system logs are improperly stored/controlled, allowing any user to read the logs. The issue is tied to improper access control around log data. The Hacker News article notes G...

GeoVision IP Camera Default Credentials (HTTP)

The remote installation of GeoVision IP Camera is using known default credentials. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...