PT-2020-17807

Name of the Vulnerable Software and Affected Versions Geovision Door Access Control device family affected versions not specified Description A buffer overflow issue exists, allowing an unauthenticated remote attacker to execute arbitrary commands. Recommendations At the moment, there is no...

CVE-2020-3931: Buffer Copy without Checking Size of Input

Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command...

Critical Bugs and Backdoor Found in GeoVision's Fingerprint and Card Scanners

GeoVision, a Taiwanese manufacturer of video surveillance systems and IP cameras, recently patched three of the four critical flaws impacting its card and fingerprint scanners that could've potentially allowed attackers to intercept network traffic and stage man-in-the-middle attacks. In a report...

Critical Bugs and Backdoor Found in GeoVision's Fingerprint and Card Scanners

GeoVision, a Taiwanese manufacturer of video surveillance systems and IP cameras, recently patched three of the four critical flaws impacting its card and fingerprint scanners that could've potentially allowed attackers to intercept network traffic and stage man-in-the-middle attacks. In a report...

GeoVision GV-GF192x Information Disclosure Vulnerability

GeoVision GV-GF192x is an access control device from GeoVision Taiwan, China. An information disclosure vulnerability exists in GeoVision GV-GF192x v1.10. An attacker can exploit this vulnerability to obtain log messages...

CVE-2020-3928

GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices...

CVE-2020-3929

GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages...

CVE-2020-3930

GeoVision Door Access Control device family improperly stores and controls access to system logs, any users can read these logs...

CVE-2020-3928

GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices...

CVE-2020-3929

GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages...

CVE-2020-3930

GeoVision Door Access Control device family improperly stores and controls access to system logs, any users can read these logs...

Information disclosure

GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages...

Hardcoded credentials

GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices...

Information disclosure

GeoVision Door Access Control device family improperly stores and controls access to system logs, any users can read these logs...

CVE-2020-3928 GeoVision Door Access Control Device - Hardcoded privileged password

GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices...

CVE-2020-3929 GeoVision Door Access Control Device - Shared cryptographic keys

GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages...

CVE-2020-3930 GeoVision Door Access Control Device - Information disclosure vulnerability

GeoVision Door Access Control device family improperly stores and controls access to system logs, any users can read these logs...

CVE-2020-3929

CVE-2020-3929 affects GeoVision Door Access Control device families that use shared cryptographic private keys for SSH and HTTPS. The underlying issue enables attackers to perform MITM attacks with derived keys and recover plaintext from encrypted messages. NVD notes medium base scores (CVSSv2 4....

CVE-2020-3928

GeoVision Door Access Control device family is affected by CVE-2020-3928 due to a hardcoded root password shared across devices, enabling unauthorized access. The Hacker News report also notes additional issues tied to the same disclosures: hardcoded SSH private keys, unauthenticated access to de...

CVE-2020-3930

CVE-2020-3930 applies to GeoVision Door Access Control device family. It is an information disclosure vulnerability where system logs are improperly stored/controlled, allowing any user to read the logs. The issue is tied to improper access control around log data. The Hacker News article notes G...