176 matches found
CVE-2026-88278 GV-LPCLPC2011/2211 - ONVIF WS-Security PasswordDigest Replay
GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations...
EUVD-2026-75312
GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ONVIF operations...
CVE-2026-88277 GV-LPCLPC2011/2211 - ONVIF Subscribe Address Command Injection
GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root...
CVE-2026-88277
GeoVision GV-LPC2211 version 1.13 is affected by a command injection vulnerability in its ONVIF interface. An authenticated ONVIF user can inject shell commands via the ConsumerReference.Address field, leading to arbitrary command execution with root privileges . The vulnerability is network-reac...
EUVD-2026-75311
GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root...
EUVD-2026-75310
GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root...
CVE-2026-88276
GeoVision GV-LPC2211 (firmware V1.13) is vulnerable to command injection via its wireless WEP Key1–Key4 fields. When an administrator sets WEP key values containing shell syntax, the device executes them as root , enabling arbitrary command execution . The CVSS 3.1 score is 7.2 (High) (AV:N/AC:L/...
CVE-2026-88276 GV-LPCLPC2011/2211 - Wireless WEP Key1-Key4 Command Injection
GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root...
CVE-2026-88275 GV-LPC2011/LPC2211 - Wireless WPA-PSK Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied...
EUVD-2026-75309
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied...
CVE-2026-88275
GeoVision GV-LPC2211 (also affecting GV-LPC2011) version V1.13 contains a command injection vulnerability in its wireless configuration. An administrator can craft a WPA-PSK password containing shell syntax that, when the wireless configuration is applied, executes arbitrary commands as root . Th...
CVE-2026-88274
GeoVision GV-LPC2211 (V1.13), a wireless camera, is affected by a command injection vulnerability in its wireless SSID configuration. An administrator who sets a wireless SSID containing shell syntax can execute arbitrary commands as root on the device. The vulnerability requires high privileges ...
EUVD-2026-75308
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root...
CVE-2026-88274 GV-LPC2011/LPC2211 - Wireless SSID Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root...
CVE-2026-88273 GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root...
CVE-2026-88273
GeoVision GV-LPC2211 (version V1.13 ) is affected by a command injection vulnerability in its PPPoE username configuration. An administrator-controlled PPPoE username value can escape a sourced shell configuration assignment , allowing the execution of arbitrary commands as root . The attack requ...
EUVD-2026-75307
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root...
CVE-2026-88272
GeoVision GV-LPC2211 V1.13 is affected by a stored command injection vulnerability in the administrator username field. When an administrator creates a username containing shell metacharacters , those characters are later interpreted as arbitrary root-level commands at the time the stored usernam...
CVE-2026-88272 GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted...